ba132921cc
- 新增 wechat_users 表迁移和 SeaORM Entity - 实现微信登录 Service（code→openid→绑定状态查询） - 实现手机号绑定 Service（创建/关联 user + 签发 JWT） - 添加公开路由 POST /auth/wechat/login 和 /auth/wechat/bind-phone - 新增 WechatConfig 到 AppConfig（appid/secret 通过环境变量配置） - 添加 reqwest 依赖用于调用微信 jscode2session API
79 lines
1.9 KiB
Rust
79 lines
1.9 KiB
Rust
use serde::Deserialize;
|
|
|
|
#[derive(Debug, Clone, Deserialize)]
|
|
pub struct AppConfig {
|
|
pub server: ServerConfig,
|
|
pub database: DatabaseConfig,
|
|
pub redis: RedisConfig,
|
|
pub jwt: JwtConfig,
|
|
pub auth: AuthConfig,
|
|
pub log: LogConfig,
|
|
pub cors: CorsConfig,
|
|
pub wechat: WechatConfig,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Deserialize)]
|
|
pub struct ServerConfig {
|
|
pub host: String,
|
|
pub port: u16,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Deserialize)]
|
|
pub struct DatabaseConfig {
|
|
pub url: String,
|
|
pub max_connections: u32,
|
|
pub min_connections: u32,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Deserialize)]
|
|
pub struct RedisConfig {
|
|
pub url: String,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Deserialize)]
|
|
pub struct JwtConfig {
|
|
pub secret: String,
|
|
pub access_token_ttl: String,
|
|
pub refresh_token_ttl: String,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Deserialize)]
|
|
pub struct LogConfig {
|
|
pub level: String,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Deserialize)]
|
|
pub struct AuthConfig {
|
|
pub super_admin_password: String,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Deserialize)]
|
|
pub struct CorsConfig {
|
|
/// Comma-separated list of allowed origins.
|
|
/// Use "*" to allow all origins (development only).
|
|
pub allowed_origins: String,
|
|
}
|
|
|
|
#[derive(Debug, Clone, Deserialize)]
|
|
pub struct WechatConfig {
|
|
pub appid: String,
|
|
pub secret: String,
|
|
}
|
|
|
|
impl AppConfig {
|
|
pub fn load() -> anyhow::Result<Self> {
|
|
let config = config::Config::builder()
|
|
.add_source(config::File::with_name("config/default"))
|
|
.add_source(config::Environment::with_prefix("ERP").separator("__"))
|
|
.build()?;
|
|
let app_config: Self = config.try_deserialize()?;
|
|
|
|
// 安全检查：禁止在生产使用默认 JWT 密钥
|
|
if app_config.jwt.secret == "change-me-in-production" {
|
|
tracing::warn!("⚠️ JWT 密钥使用默认值，请通过 ERP__JWT__SECRET 环境变量设置安全密钥");
|
|
}
|
|
|
|
Ok(app_config)
|
|
}
|
|
}
|