WangDL
fa69749884
- Split AuthService into AppleAuthService, TokenService, AuthService - Add dev-login endpoint (dev-only, disabled in production) - AppleLoginDto: authorizationCode optional, add userIdentifier/email/fullName/nonce - Login/refresh responses now include user object - logout: single-token revoke + JwtAuthGuard protection - users.repository: switch from in-memory Map to Prisma persistence - JWT payload includes role, guards attach full user info to request - Dual JWT secret support (JWT_ACCESS_SECRET / JWT_REFRESH_SECRET) - Replace jwks-rsa+jsonwebtoken with jose library - Prisma User model: add role field - Independent DTO files with @Transform for empty string safety - Add 5 iOS login flow documentation files
30 lines
1.0 KiB
TypeScript
30 lines
1.0 KiB
TypeScript
import { registerAs } from '@nestjs/config';
|
||
|
||
export default registerAs('jwt', () => {
|
||
const accessSecret = process.env.JWT_ACCESS_SECRET || process.env.JWT_SECRET;
|
||
const refreshSecret = process.env.JWT_REFRESH_SECRET || process.env.JWT_SECRET;
|
||
|
||
if (
|
||
!accessSecret ||
|
||
accessSecret === 'change_me_in_production'
|
||
) {
|
||
if (process.env.NODE_ENV === 'production') {
|
||
throw new Error(
|
||
'生产环境必须设置环境变量 JWT_ACCESS_SECRET 或 JWT_SECRET，不能使用默认值',
|
||
);
|
||
}
|
||
console.warn(
|
||
'\n⚠️ 警告: JWT_SECRET 使用的是默认值 "change_me_in_production"\n' +
|
||
' 部署到生产环境前请务必设置环境变量 JWT_ACCESS_SECRET\n',
|
||
);
|
||
}
|
||
|
||
return {
|
||
secret: accessSecret || 'change_me_in_production',
|
||
accessSecret: accessSecret || 'change_me_in_production',
|
||
refreshSecret: refreshSecret || 'change_me_in_production',
|
||
expiresIn: process.env.JWT_EXPIRES_IN || '1h',
|
||
refreshExpiresIn: process.env.JWT_REFRESH_EXPIRES_IN || '7d',
|
||
};
|
||
});
|