1

server-rs/crates/api-server/src/config.rs

@@ -6,6 +6,7 @@ use platform_llm::{
 };
 
 const DEFAULT_LLM_MODEL: &str = "doubao-1-5-pro-32k-character-250715";
+const DEFAULT_INTERNAL_API_SECRET: &str = "genarrative-dev-internal-bridge";
 
 // 集中管理 api-server 的启动配置，避免入口层直接散落环境变量解析逻辑。
 #[derive(Clone, Debug)]
@@ -13,6 +14,7 @@ pub struct AppConfig {
     pub bind_host: String,
     pub bind_port: u16,
     pub log_filter: String,
+    pub internal_api_secret: Option<String>,
     pub jwt_issuer: String,
     pub jwt_secret: String,
     pub jwt_access_token_ttl_seconds: u64,
@@ -62,6 +64,7 @@ impl Default for AppConfig {
             bind_host: "127.0.0.1".to_string(),
             bind_port: 3000,
             log_filter: "info,tower_http=info".to_string(),
+            internal_api_secret: Some(DEFAULT_INTERNAL_API_SECRET.to_string()),
             jwt_issuer: "https://auth.genarrative.local".to_string(),
             jwt_secret: "genarrative-dev-secret".to_string(),
             jwt_access_token_ttl_seconds: 2 * 60 * 60,
@@ -130,6 +133,9 @@ impl AppConfig {
             config.log_filter = log_filter;
         }
 
+        config.internal_api_secret =
+            read_first_non_empty_env(&["GENARRATIVE_INTERNAL_API_SECRET"]);
+
         if let Some(jwt_issuer) =
             read_first_non_empty_env(&["GENARRATIVE_JWT_ISSUER", "JWT_ISSUER"])
         {