06484774ad
- 新增 internal/library/crypto：RSA-OAEP(SHA-256)+AES-256-GCM 混合解密， 私钥按 配置PEM > data/crypto/rsa_private.pem > 自动生成 三级来源，公钥 SPKI 输出 - 公开接口 POST /system/auth/public-key；LoginReq 支持 encryptedKey/encryptedData - AdminCreate/AdminResetPwd 密码字段支持加密传输（allowPlain 仅开发联调） - 配置 encrypt.privateKey/allowPlain；data/ 加入 gitignore 防止私钥入库
28 lines
720 B
Go
28 lines
720 B
Go
server:
|
||
address: ":10100"
|
||
openapiPath: "/api.json"
|
||
swaggerPath: "/swagger"
|
||
logger:
|
||
level: "all"
|
||
stdout: true
|
||
# 日志落盘目录（服务器日志管理功能读取此目录）
|
||
path: "log"
|
||
database:
|
||
default:
|
||
link: "${DB_DSN}"
|
||
recruitment:
|
||
link: "${RECRUITMENT_DB_DSN}"
|
||
jwt:
|
||
# 生产环境必须通过 JWT_SECRET 覆盖该值。
|
||
secret: "${JWT_SECRET}"
|
||
accessExpire: "2h"
|
||
refreshExpire: "720h"
|
||
bark:
|
||
baseUrl: "${BARK_BASE_URL}"
|
||
deviceKey: "${BARK_DEVICE_KEY}"
|
||
pushTime: "${BARK_PUSH_TIME}"
|
||
# 登录密码混合加密（RSA + AES-GCM）：私钥留空自动生成并持久化；allowPlain 仅本地联调开启。
|
||
encrypt:
|
||
privateKey: "${ENCRYPT_PRIVATE_KEY}"
|
||
allowPlain: true
|