fix security

2026-06-21 19:53:19 +08:00
parent a37fad0e57
commit 7170b6efad
14 changed files with 422 additions and 27 deletions
@@ -27,6 +27,11 @@ try

    var jwtOptions = builder.Configuration.GetSection(JwtOptions.Section).Get<JwtOptions>()!;

+    if (string.IsNullOrWhiteSpace(jwtOptions.SigningKey)
+        || Encoding.UTF8.GetByteCount(jwtOptions.SigningKey) < 32)
+        throw new InvalidOperationException(
+            "Jwt:SigningKey must be configured and at least 256 bits (32 bytes) for HMAC-SHA256.");
+
    builder.Services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
        .AddJwtBearer(options =>
        {