From 8cf9e208e4589815451394fa580f64adfc55498e Mon Sep 17 00:00:00 2001
From: andy <594580820@qq.com>
Date: Mon, 3 Aug 2026 16:26:00 +0800
Subject: [PATCH] =?UTF-8?q?chore:=20=E8=B0=83=E6=95=B4JWT=E9=85=8D?=
 =?UTF-8?q?=E7=BD=AE=E4=BB=A5=E4=BD=BF=E7=94=A8=E7=8E=AF=E5=A2=83=E5=8F=98?=
 =?UTF-8?q?=E9=87=8F=E5=9B=9E=E9=80=80=E5=92=8C=E5=AE=89=E5=85=A8=E9=BB=98?=
 =?UTF-8?q?=E8=AE=A4=E5=AF=86=E9=92=A5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

将硬编码的静态JWT密钥替换为优先读取环境变量JWT_SECRET的配置，未设置时使用安全的默认密钥，并更新注释以指导生产环境配置环境变量而非将密钥提交至代码仓库
---
 backend/src/main/resources/application.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/backend/src/main/resources/application.yml b/backend/src/main/resources/application.yml
index a252a16..478dd0d 100644
--- a/backend/src/main/resources/application.yml
+++ b/backend/src/main/resources/application.yml
@@ -55,8 +55,9 @@ mybatis:
 # JWT 配置
 jwt:
   # HS512 算法要求密钥至少 64 字节（512 位）
-  # 生产环境请使用环境变量或密钥管理系统存储此密钥
-  secret: by-crm-jwt-secret-key-2024-hs512-requires-at-least-64-bytes-for-secure-signing-please-change-in-production-environment
+  # 环境变量 JWT_SECRET 优先；未设置时使用下方随机默认值（本地开发可直接运行）
+  # 生产部署请配置 JWT_SECRET 环境变量，真实密钥不要提交到代码库
+  secret: "${JWT_SECRET:qX6m68jtYjbAu3UnwzJadxDfgdc5C62NL+S4HUo3M66eU7+nkbDiMijtN+cs/a9Mj1qm4IyDt2FTDpUA0GI2RQ==}"
   expiration: 86400000  # 24小时，单位：毫秒
   remember-expiration: 604800000  # 记住我：7天免登录，单位：毫秒