andy/by-crm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: 调整JWT配置以使用环境变量回退和安全默认密钥

Browse Source 
将硬编码的静态JWT密钥替换为优先读取环境变量JWT_SECRET的配置，未设置时使用安全的默认密钥，并更新注释以指导生产环境配置环境变量而非将密钥提交至代码仓库
This commit is contained in:
wanglongjie 2026-08-03 16:26:00 +08:00
parent 058e1fb8a7
commit 8cf9e208e4
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
backend/src/main/resources/application.yml
View File

@ -55,8 +55,9 @@ mybatis:
# JWT 配置
jwt:
# HS512 算法要求密钥至少 64 字节（512 位）
# 生产环境请使用环境变量或密钥管理系统存储此密钥
secret: by-crm-jwt-secret-key-2024-hs512-requires-at-least-64-bytes-for-secure-signing-please-change-in-production-environment
# 环境变量 JWT_SECRET 优先；未设置时使用下方随机默认值（本地开发可直接运行）
# 生产部署请配置 JWT_SECRET 环境变量，真实密钥不要提交到代码库
secret: "${JWT_SECRET:qX6m68jtYjbAu3UnwzJadxDfgdc5C62NL+S4HUo3M66eU7+nkbDiMijtN+cs/a9Mj1qm4IyDt2FTDpUA0GI2RQ==}"
expiration: 86400000 # 24小时，单位：毫秒
remember-expiration: 604800000 # 记住我：7天免登录，单位：毫秒