feat(auth): 登录态改为滑动续期（后台 24h/7d，打手 7d/30d）

2026-10-25 13:28:58 +08:00
parent 81edf530db
commit 2fb7aae13f
31 changed files with 510 additions and 64 deletions
@@ -113,6 +113,11 @@ DB_BACKUP_KEEP=2

 # Admin
 ADMIN_SESSION_SECRET=change-me-long-random-session-secret
+# 会话滑动续期：不配置时后台 24h 空闲 / 7d 绝对上限，打手 7d 空闲 / 30d 绝对上限。
+# ADMIN_SESSION_IDLE_TTL_HOURS=24
+# ADMIN_SESSION_ABSOLUTE_TTL_HOURS=168
+# WORKER_SESSION_IDLE_TTL_HOURS=168
+# WORKER_SESSION_ABSOLUTE_TTL_HOURS=720
 ADMIN_DEFAULT_USERS_JSON=[{"username":"admin","password":"change-me-admin-password","role":"admin"},{"username":"operator","password":"change-me-operator-password","role":"operator"}]

 # 生产环境必须使用显式来源白名单，多个来源用逗号分隔。