fix(security): 删除 .env.production 并清理硬编码密码

- 删除 .env.production（含占位符密钥，已从版本控制移除） - scripts/smoke_public_*.py: 密码改为从环境变量 SMOKE_TEST_PASSWORD 读取 - infra/docker/infra.yml: POSTGRES_PASSWORD 改为引用环境变量 - packages/application/auth/jwt_handler.py: 文档示例密钥改为占位符
2026-06-27 18:10:52 +08:00
parent f7d109830a
commit 66bb0d87ab
6 changed files with 8 additions and 91 deletions
@@ -7,7 +7,7 @@ JWT 处理器委托层
 使用方式：
    from packages.application.auth.jwt_handler import JWTHandler, get_jwt_handler
    
-    jwt_handler = JWTHandler(secret_key="your-secret-key")
+    jwt_handler = JWTHandler(secret_key="<YOUR_SECRET_KEY>")
    token = jwt_handler.create_access_token(user_id="user123", workspace_id="ws456", role="admin")
    payload = jwt_handler.verify_access_token(token)
 """