refactor(api): split startup configuration

2026-07-28 12:25:28 +08:00
parent 5d2248efee
commit e43ae0574c
10 changed files with 640 additions and 496 deletions
--- a/Tiku.Api/Configuration/ExternalServiceOptionsExtensions.cs
+++ b/Tiku.Api/Configuration/ExternalServiceOptionsExtensions.cs
@@ -0,0 +1,89 @@
+using Tiku.Application.Auth;
+using Tiku.Infrastructure.Commerce;
+using Tiku.Infrastructure.Storage;
+
+namespace Tiku.Api.Configuration;
+
+internal static class ExternalServiceOptionsExtensions
+{
+    internal static IServiceCollection AddExternalServiceOptions(
+        this IServiceCollection services,
+        IConfiguration configuration,
+        IHostEnvironment environment)
+    {
+        services.Configure<ObjectStorageOptions>(
+            configuration.GetSection(ObjectStorageOptions.SectionName));
+        services.Configure<AliyunOssOptions>(
+            configuration.GetSection(AliyunOssOptions.SectionName));
+        services.PostConfigure<ObjectStorageOptions>(options =>
+        {
+            options.DefaultProvider = configuration["STORAGE_DEFAULT_PROVIDER"] ?? options.DefaultProvider;
+            options.DefaultBucket = configuration["STORAGE_DEFAULT_BUCKET"] ?? options.DefaultBucket;
+            options.PublicBaseUrl = configuration["STORAGE_PUBLIC_BASE_URL"] ?? options.PublicBaseUrl;
+            options.AllowedMimePrefixes = SplitLegacyList(
+                configuration["STORAGE_ALLOWED_MIME_PREFIXES"],
+                options.AllowedMimePrefixes);
+            options.AllowedMimeTypes = SplitLegacyList(
+                configuration["STORAGE_ALLOWED_MIME_TYPES"],
+                options.AllowedMimeTypes);
+            options.RequireTenantPrefix = bool.TryParse(
+                configuration["STORAGE_REQUIRE_TENANT_PREFIX"],
+                out var requireTenantPrefix)
+                ? requireTenantPrefix
+                : options.RequireTenantPrefix;
+            options.MaxUploadBytes = long.TryParse(
+                configuration["STORAGE_MAX_UPLOAD_BYTES"],
+                out var maxUploadBytes)
+                ? maxUploadBytes
+                : options.MaxUploadBytes;
+        });
+        services.PostConfigure<AliyunOssOptions>(options =>
+        {
+            options.Region = configuration["ALIYUN_OSS_REGION"] ?? options.Region;
+            options.Endpoint = configuration["ALIYUN_OSS_ENDPOINT"] ?? options.Endpoint;
+            options.AccessKeyId = configuration["ALIYUN_OSS_ACCESS_KEY_ID"] ?? options.AccessKeyId;
+            options.AccessKeySecret = configuration["ALIYUN_OSS_ACCESS_KEY_SECRET"] ?? options.AccessKeySecret;
+            options.SecurityToken = configuration["ALIYUN_OSS_STS_TOKEN"] ?? options.SecurityToken;
+            options.UseInternalEndpoint = bool.TryParse(
+                configuration["ALIYUN_OSS_INTERNAL"],
+                out var useInternalEndpoint)
+                ? useInternalEndpoint
+                : options.UseInternalEndpoint;
+        });
+
+        services.AddOptions<TenantSecretEncryptionOptions>()
+            .Bind(configuration.GetSection(TenantSecretEncryptionOptions.SectionName))
+            .PostConfigure(options =>
+            {
+                options.KeyId = configuration["TIKU_TENANT_SECRET_KEY_ID"] ?? options.KeyId;
+                options.MasterKey = configuration["TIKU_TENANT_SECRET_MASTER_KEY"] ?? options.MasterKey;
+            })
+            .Validate(
+                TenantSecretEncryptionOptions.BeValid,
+                "Tenant secret encryption requires a key ID and a base64-encoded 32-byte master key.")
+            .Validate(
+                options => !environment.IsProduction() ||
+                           !TenantSecretEncryptionOptions.IsDevelopmentDefault(options),
+                "Production tenant secret encryption cannot use the development master key.")
+            .ValidateOnStart();
+
+        services.AddOptions<SmsSecurityOptions>()
+            .Bind(configuration.GetSection(SmsSecurityOptions.SectionName))
+            .PostConfigure(options =>
+            {
+                options.CodePepper = configuration["TIKU_SMS_CODE_PEPPER"] ?? options.CodePepper;
+            })
+            .Validate(
+                SmsSecurityOptions.BeValid,
+                "SMS security requires a pepper of at least 32 characters, exactly five verification attempts, " +
+                "and positive tenant, phone, IP, and device rate limits.")
+            .ValidateOnStart();
+
+        return services;
+    }
+
+    private static string[] SplitLegacyList(string? value, string[] fallback) =>
+        string.IsNullOrWhiteSpace(value)
+            ? fallback
+            : value.Split(',', StringSplitOptions.TrimEntries | StringSplitOptions.RemoveEmptyEntries);
+}