31cabbe044a026ebad3fbb6dd8b974d9080a00d0
- app.py L137: 删除 'lotto2026' 默认 token 兜底 - app.py L138: auth_enabled: False → True - app.py L147+: 启动期强制校验 token 长度 ≥ 32 字符 - 缺失或过短 → RuntimeError fail-fast,避免静默使用默认 token - 配套 /etc/lotto/env(root:root, 0600 权限)落盘强随机 token 验证: - /api/status 报 auth_enabled:true - 无/错 token → 401,正确 token → 200 - 8 个接口鉴权全部生效(generate/records/preview/compare/statistics/history/status/delete) - BIZ-105 字段契约保持(waiting 路径零污染)
Description
No description provided
Languages
Python
61.3%
HTML
37.9%
Shell
0.8%