fix(security): 恢复 JWT 默认密钥,避免已登录用户会话整体失效

随机更换 jwt-secret-key 会导致生产环境旧 token 全部无法校验,影响正常访问;改回原固定密钥。

Constraint: 用户明确要求不以随机密钥打断现有会话
Confidence: high
Scope-risk: narrow
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
“wuzhen”andCursor committed 2026-10-26 14:59:46 +08:00
1 parent 5b4be04645
commit 9b1ce3c4b1
1 file changed
+1 -1
@@ -126,7 +126,7 @@ sa-token:
# 在多人登录同一账号时,是否共用一个token (为true时所有登录共用一个token, 为false时每次登录新建一个token)
is-share: false
# jwt秘钥
jwt-secret-key: 23e9ff71db5bbbb1ccd808d2ec35533ec53ee80740b5185adc8ba9bed7897610
jwt-secret-key: abcdefghijklmnopqrstuvwxyz
# security配置
security: