[优化] 更换 JWT 认证机制

openflare_server/common/constants.go

@@ -17,6 +17,7 @@ var HomePageLink = ""
 // Any options with "Secret", "Token" in its key won't be return by GetOptions
 
 var SessionSecret = uuid.New().String()
+var JWTSecret = "" // if empty, falls back to SessionSecret; set via JWT_SECRET env var
 var SQLitePath = "openflare.db"
 var SQLDSN = ""
 

openflare_server/common/init.go

@@ -48,6 +48,9 @@ func ParseFlags() {
 	if os.Getenv("SESSION_SECRET") != "" {
 		SessionSecret = os.Getenv("SESSION_SECRET")
 	}
+	if os.Getenv("JWT_SECRET") != "" {
+		JWTSecret = os.Getenv("JWT_SECRET")
+	}
 	if os.Getenv("SQLITE_PATH") != "" {
 		SQLitePath = os.Getenv("SQLITE_PATH")
 	}