Files
kefu_cloud/server/internal/config/config.go
T
yml2213 e675f427a7 feat(auth): JWT 滑动续期 + 401 自动登出,修复长挂机莫名掉线
- 后端:JWT 有效期可配(JWT_EXPIRE_HOURS,默认 24h);令牌寿命过半时经
  X-Renewed-Token 响应头滑动续期;新增 POST /api/auth/refresh 以数据库真实身份签发
- 前端 request 层:静默接管续期头并同步 localStorage;任何 401(登录/续期除外)
  统一广播会话过期事件
- auth store:监听过期事件清理登录态并跳转 /login?expired=1(不再卡 403 页);
  每 10 分钟定时续期,避免 WS 重连时令牌已过期
- 新增滑动续期单元测试(回签过期时间戳),go test -race 通过
2026-09-05 15:57:42 +08:00

156 lines
3.8 KiB
Go

package config
import (
"os"
"strconv"
"strings"
"time"
)
type Config struct {
Server ServerConfig
Database DatabaseConfig
JWT JWTConfig
Storage StorageConfig
Redis RedisConfig
AllowedOrigins []string
}
type ServerConfig struct {
Port string
Mode string
}
type DatabaseConfig struct {
Host string
Port string
User string
Password string
Name string
SSLMode string
}
type JWTConfig struct {
Secret string
ExpireTime time.Duration
ExpireHours int
}
// StorageConfig S3 兼容对象存储(MinIO / OSS / COS / S3 共用字段)
type StorageConfig struct {
Endpoint string // 如 localhost:9100(开发 MinIO)或 oss-cn-hangzhou.aliyuncs.com
AccessKey string
SecretKey string
Bucket string
UseSSL bool
Region string
PublicBase string // 浏览器可访问前缀,如 http://localhost:9100/kefu
MaxUploadMB int
MaxImageEdge int // 最长边像素
WebPQuality float32
}
// RedisConfig 可选的跨节点 WebSocket 广播总线(多 API 副本部署时启用)。
type RedisConfig struct {
Addr string // 为空表示单实例模式,WS 广播仅进程内
Password string
DB int
}
func Load() *Config {
return &Config{
Server: ServerConfig{
Port: getEnv("SERVER_PORT", "8080"),
Mode: getEnv("GIN_MODE", "debug"),
},
Database: DatabaseConfig{
Host: getEnv("DB_HOST", "localhost"),
Port: getEnv("DB_PORT", "5433"),
User: getEnv("DB_USER", "postgres"),
Password: getEnv("DB_PASSWORD", "postgres"),
Name: getEnv("DB_NAME", "kefu_cloud"),
SSLMode: getEnv("DB_SSLMODE", "disable"),
},
JWT: func() JWTConfig {
hours := getEnvInt("JWT_EXPIRE_HOURS", 24)
if hours <= 0 {
hours = 24
}
return JWTConfig{
Secret: getEnv("JWT_SECRET", "kefu-cloud-secret-key"),
ExpireTime: time.Duration(hours) * time.Hour,
ExpireHours: hours,
}
}(),
Storage: StorageConfig{
// 默认映射宿主机 9100→容器 9000,避免与其它项目 MinIO 冲突
Endpoint: getEnv("STORAGE_ENDPOINT", "localhost:9100"),
AccessKey: getEnv("STORAGE_ACCESS_KEY", "minioadmin"),
SecretKey: getEnv("STORAGE_SECRET_KEY", "minioadmin"),
Bucket: getEnv("STORAGE_BUCKET", "kefu"),
UseSSL: getEnvBool("STORAGE_USE_SSL", false),
Region: getEnv("STORAGE_REGION", "us-east-1"),
PublicBase: getEnv("STORAGE_PUBLIC_BASE_URL", "http://localhost:9100/kefu"),
MaxUploadMB: getEnvInt("STORAGE_MAX_UPLOAD_MB", 10),
MaxImageEdge: getEnvInt("STORAGE_MAX_IMAGE_EDGE", 1920),
WebPQuality: float32(getEnvInt("STORAGE_WEBP_QUALITY", 80)),
},
AllowedOrigins: splitCSV(getEnv("CORS_ALLOW_ORIGINS", "*")),
Redis: RedisConfig{
Addr: getEnv("REDIS_ADDR", ""),
Password: getEnv("REDIS_PASSWORD", ""),
DB: getEnvInt("REDIS_DB", 0),
},
}
}
func splitCSV(raw string) []string {
parts := strings.Split(raw, ",")
result := make([]string, 0, len(parts))
for _, part := range parts {
if value := strings.TrimSpace(part); value != "" {
result = append(result, value)
}
}
if len(result) == 0 {
return []string{"*"}
}
return result
}
func (d *DatabaseConfig) DSN() string {
return "host=" + d.Host + " port=" + d.Port + " user=" + d.User +
" password=" + d.Password + " dbname=" + d.Name + " sslmode=" + d.SSLMode
}
func getEnv(key, fallback string) string {
if v := os.Getenv(key); v != "" {
return v
}
return fallback
}
func getEnvBool(key string, fallback bool) bool {
v := os.Getenv(key)
if v == "" {
return fallback
}
b, err := strconv.ParseBool(v)
if err != nil {
return fallback
}
return b
}
func getEnvInt(key string, fallback int) int {
v := os.Getenv(key)
if v == "" {
return fallback
}
n, err := strconv.Atoi(v)
if err != nil {
return fallback
}
return n
}