feat: harden SaaS authentication and authorization

2026-07-28 12:15:51 +08:00
parent f22f329d33
commit 5d2248efee
123 changed files with 9090 additions and 2822 deletions
--- a/Tiku.Api/appsettings.Development.json
+++ b/Tiku.Api/appsettings.Development.json
@@ -24,9 +24,14 @@
    "WindowSeconds": 60,
    "QueueLimit": 0
  },
+  "Authentication": {
+    "Sms": {
+      "CodePepper": "development-only-sms-code-pepper-change-before-production"
+    }
+  },
  "Security": {
    "Jwt": {
-      "SigningKey": "development-only-tiku-signing-key-change-before-production"
+      "KeyId": "development-ephemeral"
    },
    "TenantSecrets": {
      "KeyId": "development-v1",