Revert "fix(security): 补齐旧部署安全密钥"

This reverts commit d01b0e9036.
2026-09-12 23:09:34 +08:00
parent d01b0e9036
commit 26b1cdcdc6
4 changed files with 21 additions and 43 deletions
@@ -30,24 +30,14 @@ try {
    $upgrade = Write-TestEnv "upgrade.env" @(
        "CONFIG_JWT_SECRET='this is a very secret secret'",
        "CONFIG_SECURITY_CONFIG_ENCRYPTION_KEY=",
-        "CONFIG_OTP_HASH_SECRET=",
-        "CONFIG_AUDIT_HASH_PEPPER=",
-        "CONFIG_AUDIT_INTEGRITY_KEY=",
        "WS_AUTH_WS_TICKET_SECRET=",
        "WS_AUTH_METHODS=none,bearer"
    )
    Initialize-SecurityEnv -Path $upgrade -Mode upgrade
    $upgradeContent = Get-Content $upgrade -Raw -Encoding UTF8
-    foreach ($key in @(
-        "CONFIG_JWT_SECRET",
-        "CONFIG_SECURITY_CONFIG_ENCRYPTION_KEY",
-        "CONFIG_OTP_HASH_SECRET",
-        "CONFIG_AUDIT_HASH_PEPPER",
-        "CONFIG_AUDIT_INTEGRITY_KEY",
-        "WS_AUTH_WS_TICKET_SECRET"
-    )) {
-        Assert-MinLength $upgradeContent $key 32
-    }
+    Assert-MinLength $upgradeContent "CONFIG_JWT_SECRET" 32
+    Assert-MinLength $upgradeContent "WS_AUTH_WS_TICKET_SECRET" 32
+    Assert-Value $upgradeContent "CONFIG_SECURITY_CONFIG_ENCRYPTION_KEY" ""
    Assert-Value $upgradeContent "WS_AUTH_METHODS" "none,bearer,ws_ticket"
    $upgradeBeforeRepeat = $upgradeContent
    Initialize-SecurityEnv -Path $upgrade -Mode upgrade