fix(security): 补齐旧部署安全密钥

2026-09-12 22:46:50 +08:00
parent f4e7b9b461
commit d01b0e9036
4 changed files with 43 additions and 21 deletions
@@ -30,14 +30,24 @@ try {
    $upgrade = Write-TestEnv "upgrade.env" @(
        "CONFIG_JWT_SECRET='this is a very secret secret'",
        "CONFIG_SECURITY_CONFIG_ENCRYPTION_KEY=",
+        "CONFIG_OTP_HASH_SECRET=",
+        "CONFIG_AUDIT_HASH_PEPPER=",
+        "CONFIG_AUDIT_INTEGRITY_KEY=",
        "WS_AUTH_WS_TICKET_SECRET=",
        "WS_AUTH_METHODS=none,bearer"
    )
    Initialize-SecurityEnv -Path $upgrade -Mode upgrade
    $upgradeContent = Get-Content $upgrade -Raw -Encoding UTF8
-    Assert-MinLength $upgradeContent "CONFIG_JWT_SECRET" 32
-    Assert-MinLength $upgradeContent "WS_AUTH_WS_TICKET_SECRET" 32
-    Assert-Value $upgradeContent "CONFIG_SECURITY_CONFIG_ENCRYPTION_KEY" ""
+    foreach ($key in @(
+        "CONFIG_JWT_SECRET",
+        "CONFIG_SECURITY_CONFIG_ENCRYPTION_KEY",
+        "CONFIG_OTP_HASH_SECRET",
+        "CONFIG_AUDIT_HASH_PEPPER",
+        "CONFIG_AUDIT_INTEGRITY_KEY",
+        "WS_AUTH_WS_TICKET_SECRET"
+    )) {
+        Assert-MinLength $upgradeContent $key 32
+    }
    Assert-Value $upgradeContent "WS_AUTH_METHODS" "none,bearer,ws_ticket"
    $upgradeBeforeRepeat = $upgradeContent
    Initialize-SecurityEnv -Path $upgrade -Mode upgrade