feat: production hardening - CORS whitelist, strong password, tokenVersion revoke, VIP card hashing, admin secret

2026-05-10 22:53:32 +08:00
parent 5b23c88df9
commit 21709e5d97
9 changed files with 299 additions and 69 deletions
--- a/prisma/schema.prisma
+++ b/prisma/schema.prisma
@@ -24,6 +24,9 @@ model User {
  isVip         Boolean   @default(false) @map("is_vip")
  vipLevel      Int       @default(0) @map("vip_level")
  vipExpireAt   DateTime? @map("vip_expire_at")
+
+  // Token 吊销 (递增版本号使旧 token 失效)
+  tokenVersion  Int       @default(0) @map("token_version")
  
  // 统计
  schemesCount      Int   @default(0) @map("schemes_count")