- 新增 security_secrets 表及 Ent schema 用于存储系统级密钥 - 启动阶段支持无 jwt.secret 配置并在数据库中自动生成持久化 - 在 Ent 初始化后补齐密钥并执行完整配置校验 - 增加并发与异常分支单元测试,覆盖密钥引导核心路径 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
43 lines
822 B
Go
43 lines
822 B
Go
package schema
|
|
|
|
import (
|
|
"github.com/Wei-Shaw/sub2api/ent/schema/mixins"
|
|
|
|
"entgo.io/ent"
|
|
"entgo.io/ent/dialect"
|
|
"entgo.io/ent/dialect/entsql"
|
|
"entgo.io/ent/schema"
|
|
"entgo.io/ent/schema/field"
|
|
)
|
|
|
|
// SecuritySecret 存储系统级安全密钥(如 JWT 签名密钥、TOTP 加密密钥)。
|
|
type SecuritySecret struct {
|
|
ent.Schema
|
|
}
|
|
|
|
func (SecuritySecret) Annotations() []schema.Annotation {
|
|
return []schema.Annotation{
|
|
entsql.Annotation{Table: "security_secrets"},
|
|
}
|
|
}
|
|
|
|
func (SecuritySecret) Mixin() []ent.Mixin {
|
|
return []ent.Mixin{
|
|
mixins.TimeMixin{},
|
|
}
|
|
}
|
|
|
|
func (SecuritySecret) Fields() []ent.Field {
|
|
return []ent.Field{
|
|
field.String("key").
|
|
MaxLen(100).
|
|
NotEmpty().
|
|
Unique(),
|
|
field.String("value").
|
|
NotEmpty().
|
|
SchemaType(map[string]string{
|
|
dialect.Postgres: "text",
|
|
}),
|
|
}
|
|
}
|