ext/new-api
2
0
Fork 0
mirror of https://github.com/QuantumNous/new-api.git synced 2026-09-12 15:21:09 +00:00
Code Activity

feat(auth): make password encryption opt-in #6743

Browse Source
This commit is contained in:
CaIon
2026-08-29 20:54:07 +08:00
parent 8454082f93
commit 918427d8ab
9 changed files with 46 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.example
+2
View File
@@ -79,6 +79,8 @@
# 会话密钥
# SESSION_SECRET=random_string
# 登录密码请求体 RSA-OAEP 加密；默认关闭，且不能替代 HTTPS
# PASSWORD_LOGIN_ENCRYPTION_ENABLED=true
# false/未配置：本地 HTTP 模式，关闭 refresh/logout OriginGuard，且不得设置 TRUSTED_URL；兼容本地开发代理。
# true：启用 Secure Refresh Cookie 和严格 OriginGuard，必须同时列出全部可信 HTTPS Origin。
# SESSION_COOKIE_TRUSTED_URL 多项用英文逗号分隔；不支持通配符、路径或域名后缀匹配。