From a170cc6a4803029ec7fa223b20c9667fdea30dcd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E2=80=9Cwuzhen=E2=80=9D?= Date: Mon, 26 Oct 2026 15:47:06 +0800 Subject: [PATCH] =?UTF-8?q?fix(security):=20=E7=94=9F=E4=BA=A7=E9=85=8D?= =?UTF-8?q?=E7=BD=AE=E6=98=BE=E5=BC=8F=E5=9B=BA=E5=AE=9A=20JWT=20=E5=AF=86?= =?UTF-8?q?=E9=92=A5=EF=BC=8C=E9=98=B2=E6=AD=A2=E4=BC=9A=E8=AF=9D=E6=95=B4?= =?UTF-8?q?=E4=BD=93=E5=A4=B1=E6=95=88?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Confidence: high Scope-risk: narrow Co-authored-by: Cursor --- backend/ruoyi-admin/src/main/resources/application-prod.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/backend/ruoyi-admin/src/main/resources/application-prod.yml b/backend/ruoyi-admin/src/main/resources/application-prod.yml index 60cf8a72..b692c6d4 100644 --- a/backend/ruoyi-admin/src/main/resources/application-prod.yml +++ b/backend/ruoyi-admin/src/main/resources/application-prod.yml @@ -1,3 +1,7 @@ +--- # Sa-Token（生产显式固定 JWT 密钥，禁止使用随机密钥，否则已登录会话会整体失效） +sa-token: + jwt-secret-key: abcdefghijklmnopqrstuvwxyz + --- # 临时文件存储位置 避免临时文件被系统清理报错 spring.servlet.multipart.location: /ruoyi/server/temp