ebc507ee6c
- crypto.Service 增 fullBody 开关 + DecryptRequest/EncryptResponse（会话密钥双向加密） - 新增 middleware/APICrypto：请求整体解密 + 响应加密（public-key 豁免），未加密请求拒绝 - ResolveLogin/resolvePassword 增 fullBody 分支；admin 组中间件链调整 - injectEnv 支持 ENCRYPT_FULL_BODY/ENCRYPT_ALLOW_PLAIN（直接跑二进制需 env 注入）
30 lines
822 B
Go
30 lines
822 B
Go
server:
|
||
address: ":10100"
|
||
openapiPath: "/api.json"
|
||
swaggerPath: "/swagger"
|
||
logger:
|
||
level: "all"
|
||
stdout: true
|
||
# 日志落盘目录（服务器日志管理功能读取此目录）
|
||
path: "log"
|
||
database:
|
||
default:
|
||
link: "${DB_DSN}"
|
||
recruitment:
|
||
link: "${RECRUITMENT_DB_DSN}"
|
||
jwt:
|
||
# 生产环境必须通过 JWT_SECRET 覆盖该值。
|
||
secret: "${JWT_SECRET}"
|
||
accessExpire: "2h"
|
||
refreshExpire: "720h"
|
||
bark:
|
||
baseUrl: "${BARK_BASE_URL}"
|
||
deviceKey: "${BARK_DEVICE_KEY}"
|
||
pushTime: "${BARK_PUSH_TIME}"
|
||
# 登录密码混合加密（RSA + AES-GCM）：私钥留空自动生成并持久化；allowPlain 仅本地联调开启。
|
||
# fullBody 保持 false：开发环境仅加密密码字段，便于抓包联调。
|
||
encrypt:
|
||
privateKey: "${ENCRYPT_PRIVATE_KEY}"
|
||
allowPlain: true
|
||
fullBody: false
|