xiongyuxing/gongxue-base
1
0
Fork 0
forked from wangziqi/gongxue-base
Code Pull Requests Activity

docs: lock production SMS on PNVS

Browse Source
This commit is contained in:
Codex
2026-07-04 00:03:21 +08:00
parent e0032eaab3
commit 287c2476c6
5 changed files with 14 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
scripts/aliyun-pnvs-provider-contract-test.js
View File

@@ -9,6 +9,7 @@ const deployEnvExample = fs.readFileSync(path.join(process.cwd(), 'scripts/deplo
const providerDoc = fs.readFileSync(path.join(process.cwd(), 'docs/refactor/auth-payment-provider-plan.md'), 'utf8');
const launchChecklist = fs.readFileSync(path.join(process.cwd(), 'docs/refactor/web-launch-acceptance-checklist.md'), 'utf8');
const readinessSource = fs.readFileSync(path.join(process.cwd(), 'scripts/production-readiness-check.js'), 'utf8');
const packageJson = fs.readFileSync(path.join(process.cwd(), 'package.json'), 'utf8');
const tenantProviderConfigSource = fs.readFileSync(path.join(process.cwd(), 'apps/api/src/core/tenant-provider-config.ts'), 'utf8');
const platformDunningNotificationWorker = fs.readFileSync(path.join(process.cwd(), 'apps/worker/src/jobs/platform-dunning-notifications.ts'), 'utf8');
@@ -30,6 +31,8 @@ assert.match(providerDoc, /SendSmsVerifyCode/, 'provider doc should document PNV
assert.match(providerDoc, /CheckSmsVerifyCode/, 'provider doc should document PNVS verify action');
assert.match(providerDoc, /PNVS 只用于手机号登录和 `bind_phone`/, 'provider doc should constrain PNVS to verification-code auth flows');
assert.doesNotMatch(platformDunningNotificationWorker, /aliyun-pnvs|SendSmsVerifyCode|CheckSmsVerifyCode/, 'platform dunning notifications must not use PNVS verification APIs');
assert.match(launchChecklist, /AUTH_SMS_PROVIDER=aliyun-pnvs/, 'launch checklist should allow aliyun-pnvs');
assert.match(packageJson, /diagnose:aliyun-pnvs/, 'package scripts should expose PNVS diagnostics');
assert.match(launchChecklist, /AUTH_SMS_PROVIDER=aliyun-pnvs\s*```/, 'launch checklist should require aliyun-pnvs for production SMS verification');
assert.match(launchChecklist, /diagnose:aliyun-pnvs/, 'launch checklist should run PNVS diagnostics before remote smoke');
console.log('[PASS] Aliyun PNVS provider contract');

2
scripts/deploy/env/api.env.example vendored
View File

@@ -18,7 +18,7 @@ AUTH_SESSION_SECRET=replace-with-strong-random-session-secret
AUTH_CODE_PEPPER=replace-with-strong-random-code-pepper
PLATFORM_ADMIN_API_KEY=replace-with-strong-random-platform-admin-key
# Supported production values: aliyun, aliyun-pnvs, tencent.
# Production SMS verification uses aliyun-pnvs. Traditional aliyun/tencent adapters are compatibility paths only.
# Tenant-level SMS AccessKey/SecretKey live in app_private.tenant_secrets, not in this env file.
AUTH_SMS_PROVIDER=aliyun-pnvs