- 新增 POST /auth/fusion/token 获取 SDK 鉴权 Token - 新增 POST /auth/fusion/verify 用 verifyToken 换取手机号并登录/注册 - 新增 GET /auth/providers 按平台返回可用登录方式列表 - 新增 PUT /admin/auth-providers 管理端热切换第三方登录开关 - 新增 appSettings 表存储运行时配置,支持不重启生效 - 修复 schema 中超长外键名称导致的 db:push 失败
40 lines
932 B
Plaintext
40 lines
932 B
Plaintext
# Database
|
||
DATABASE_URL=mysql://root:password@localhost:3306/duoqi
|
||
|
||
# JWT
|
||
# 生成安全密钥: openssl rand -base64 32
|
||
# 或: node -e "console.log(require('crypto').randomBytes(32).toString('base64'))"
|
||
JWT_SECRET=change-me-to-a-secure-secret
|
||
JWT_EXPIRES_IN=1h
|
||
JWT_REFRESH_EXPIRES_IN=30d
|
||
|
||
# Admin
|
||
# 生成方式同 JWT_SECRET,建议与生产环境使用不同的值
|
||
ADMIN_TOKEN=change-me-admin-token
|
||
|
||
# Huawei ID Kit (Phase 1b)
|
||
HUAWEI_CLIENT_ID=
|
||
HUAWEI_CLIENT_SECRET=
|
||
|
||
# Alibaba Cloud OSS
|
||
OSS_ACCESS_KEY_ID=
|
||
OSS_ACCESS_KEY_SECRET=
|
||
OSS_BUCKET=
|
||
OSS_REGION=
|
||
|
||
# Alibaba Cloud Fusion Auth (Phase 1e)
|
||
# 阿里云号码认证服务,用于手机号一键登录和短信验证码登录
|
||
# RAM 子用户需授予 AliyunDypnsFullAccess 权限
|
||
ALIYUN_ACCESS_KEY_ID=
|
||
ALIYUN_ACCESS_KEY_SECRET=
|
||
ALIYUN_FUSION_SCHEME_CODE=
|
||
|
||
# Huawei IAP (Phase 1c)
|
||
HUAWEI_IAP_URL=
|
||
HUAWEI_MERCHANT_ID=
|
||
|
||
# Application
|
||
PORT=3000
|
||
NODE_ENV=development
|
||
LOG_LEVEL=info
|