Fail closed when SpacetimeDB auth restore is unavailable

2026-05-27 20:58:37 +08:00
parent 948d5a698c
commit 418fcb0548
24 changed files with 595 additions and 601 deletions
--- a/.env.example
+++ b/.env.example
@@ -46,8 +46,6 @@ AUTH_REFRESH_SESSION_TTL_DAYS="30"
 AUTH_REFRESH_COOKIE_PATH="/api/auth"
 AUTH_REFRESH_COOKIE_SAME_SITE="Lax"
 AUTH_REFRESH_COOKIE_SECURE="false"
-# Rust 鉴权快照路径；包含 password_hash 与 refresh token hash，只能放服务端私有目录。
-GENARRATIVE_AUTH_STORE_PATH="server-rs/.data/auth-store.json"
 # 开发期便捷开关：true 时允许 /api/auth/entry 对未知手机号用本次密码直接创建账号；生产必须保持 false。
 GENARRATIVE_DEV_PASSWORD_ENTRY_AUTO_REGISTER_ENABLED="false"