37 lines
1.2 KiB
Python
37 lines
1.2 KiB
Python
"""认证与后台账户配置。
|
||
|
||
配置来源（优先级从高到低）：
|
||
1. 环境变量（os.environ，由 config/__init__.py 从 settings.json / .env 注入）
|
||
2. 默认值
|
||
"""
|
||
|
||
import os
|
||
|
||
|
||
def _get(name: str, default: str = "") -> str:
|
||
"""从环境变量获取配置。"""
|
||
return str(os.environ.get(name, "") or "").strip() or default
|
||
|
||
|
||
ADMIN_USERNAME = _get("AGENT_CFG_ADMIN_USERNAME") or _get("AGENT_ADMIN_USERNAME", "")
|
||
ADMIN_PASSWORD_HASH = _get("AGENT_CFG_ADMIN_PASSWORD_HASH") or _get("AGENT_ADMIN_PASSWORD_HASH", "")
|
||
|
||
# 管理员二级密码（可选）。
|
||
ADMIN_SECONDARY_PASSWORD_HASH = _get("AGENT_CFG_ADMIN_SECONDARY_PASSWORD_HASH") or _get("ADMIN_SECONDARY_PASSWORD_HASH", "")
|
||
ADMIN_SECONDARY_PASSWORD = _get("ADMIN_SECONDARY_PASSWORD", "")
|
||
|
||
# 二级密码会话有效期（秒）。默认 30 分钟。
|
||
ADMIN_SECONDARY_TTL_SECONDS = int(_get("AGENT_ADMIN_SECONDARY_TTL_SECONDS", "1800") or 1800)
|
||
|
||
# API Token 加密密钥来源。
|
||
API_TOKEN_SECRET = _get("AGENT_CFG_SECRETS_API_TOKEN_SECRET") or _get("API_TOKEN_SECRET", "")
|
||
|
||
__all__ = [
|
||
"ADMIN_USERNAME",
|
||
"ADMIN_PASSWORD_HASH",
|
||
"ADMIN_SECONDARY_PASSWORD_HASH",
|
||
"ADMIN_SECONDARY_PASSWORD",
|
||
"ADMIN_SECONDARY_TTL_SECONDS",
|
||
"API_TOKEN_SECRET",
|
||
]
|