duxingchen
69f3e35d14
1. Dashboard统计Bug修复 - Task统计改用TASK_STATUS_PENDING/WIP/COMPLETED大写常量 - 旧代码使用小写"pending"/"in_progress"永远匹配不到数据 - 修复后tasks_pending/tasks_in_progress/tasks_completed返回真实值 2. 生产环境SECRET_KEY强制校验 - 新增model_validator：DEBUG=False且SECRET_KEY为默认值时抛出ValueError - 阻止使用默认密钥部署到生产环境
47 lines
1.7 KiB
Python
47 lines
1.7 KiB
Python
"""核心配置 — Pydantic Settings 自动从 .env 读取"""
|
||
import json
|
||
from pydantic import model_validator
|
||
from pydantic_settings import BaseSettings
|
||
|
||
|
||
class Settings(BaseSettings):
|
||
# ---- 数据库 ----
|
||
DATABASE_URL: str = "postgresql+asyncpg://track:track_prod_2026@localhost:5433/track_production"
|
||
|
||
# ---- JWT ----
|
||
SECRET_KEY: str = "change-me-in-production"
|
||
ACCESS_TOKEN_EXPIRE_MINUTES: int = 120 # Access Token: 2 小时
|
||
REFRESH_TOKEN_EXPIRE_DAYS: int = 7 # Refresh Token: 7 天
|
||
|
||
# ---- 调试 ----
|
||
DEBUG: bool = True
|
||
|
||
# ---- CORS 跨域白名单（JSON 数组字符串，直接从 .env 的 CORS_ORIGINS 读取） ----
|
||
CORS_ORIGINS: str = '["http://localhost:1420", "tauri://localhost"]'
|
||
|
||
@property
|
||
def CORS_ORIGINS_LIST(self) -> list[str]:
|
||
"""将 JSON 字符串解析为 Python list，供 CORSMiddleware 使用"""
|
||
try:
|
||
return json.loads(self.CORS_ORIGINS)
|
||
except (json.JSONDecodeError, TypeError):
|
||
return ["http://localhost:1420", "tauri://localhost"]
|
||
|
||
@model_validator(mode="after")
|
||
def _validate_production_secret(self):
|
||
"""生产环境强制校验：SECRET_KEY 禁止使用默认值"""
|
||
if not self.DEBUG and self.SECRET_KEY == "change-me-in-production":
|
||
raise ValueError(
|
||
"生产环境 (DEBUG=False) 禁止使用默认 SECRET_KEY。"
|
||
"请在 .env 中设置 SECRET_KEY 为至少 32 字符的随机值。"
|
||
"示例: python -c \"import secrets; print(secrets.token_urlsafe(32))\""
|
||
)
|
||
return self
|
||
|
||
class Config:
|
||
env_file = ".env"
|
||
extra = "ignore"
|
||
|
||
|
||
settings = Settings()
|