Kaynağa Gözat

fix(security): 生产配置显式固定 JWT 密钥,防止会话整体失效

Confidence: high
Scope-risk: narrow
Co-authored-by: Cursor <cursoragent@cursor.com>
“wuzhen” 4 gün önce
ebeveyn
işleme
a170cc6a48

+ 4 - 0
backend/ruoyi-admin/src/main/resources/application-prod.yml

@@ -1,3 +1,7 @@
+--- # Sa-Token(生产显式固定 JWT 密钥,禁止使用随机密钥,否则已登录会话会整体失效)
+sa-token:
+  jwt-secret-key: abcdefghijklmnopqrstuvwxyz
+
 --- # 临时文件存储位置 避免临时文件被系统清理报错
 spring.servlet.multipart.location: /ruoyi/server/temp