refactor: 精简配置体系,移除 OAuth 登录/Rate Limit/Admin env 配置

- 移除 .env.example 中 Feature Flags 段(代码中不存在这些 env var)
- 移除 Google/GitHub OAuth 登录认证代码(auth/oauth.go、auth_handler
  OAuthAuthorize/OAuthCallback 路由、auth_service OAuthLogin),保留
  Twitter/Google 作为消息渠道 provider
- 从 OAuthConfig 移除 GitHub 字段(Google 保留供 channel provider 使用)
- 移除 RateLimitConfig 可配置性,RateLimit 中间件改为硬编码 100 req/min、
  60s window,移除 config/validator/reloader 中的 rate_limit 相关代码
- 移除 .env.example 中 GOCHAT_ADMIN_EMAIL/PASSWORD 配置
- 新增 gochat init 命令:交互式或通过 --email/--password/--name flags
  初始化超级管理员账户,创建默认 Account + AccountUser 关联
This commit is contained in:
Rogee
2026-07-29 16:26:19 +08:00
parent 7ed53bec47
commit fa6737e258
15 changed files with 209 additions and 732 deletions
-19
View File
@@ -70,21 +70,7 @@ GOCHAT_ANALYTICS_ENABLED=true
GOCHAT_ANALYTICS_RETENTION_DAYS=90 # how long to keep reporting events
GOCHAT_ANALYTICS_FLUSH_INTERVAL=300 # seconds between rollup flushes
# ---- Feature Flags ----
GOCHAT_FEATURE_CAPTAIN_AI=false
GOCHAT_FEATURE_AUTO_ASSIGNMENT=true
GOCHAT_FEATURE_CSAT=true
GOCHAT_FEATURE_CAMPAIGNS=false
GOCHAT_FEATURE_MFA=true
# ---- OAuth Providers ----
GOCHAT_OAUTH_GOOGLE_CLIENT_ID=
GOCHAT_OAUTH_GOOGLE_CLIENT_SECRET=
GOCHAT_OAUTH_GOOGLE_REDIRECT_URL=https://your-domain.com/api/v1/auth/google/callback
GOCHAT_OAUTH_GOOGLE_SCOPES=openid,email,profile
GOCHAT_OAUTH_GITHUB_CLIENT_ID=
GOCHAT_OAUTH_GITHUB_CLIENT_SECRET=
GOCHAT_OAUTH_GITHUB_REDIRECT_URL=https://your-domain.com/api/v1/auth/github/callback
# G10: Twitter/X OAuth 2.0 (PKCE) + Account Activity API
GOCHAT_OAUTH_TWITTER_CLIENT_ID=
GOCHAT_OAUTH_TWITTER_CLIENT_SECRET=
@@ -131,8 +117,3 @@ GOCHAT_OIDC_DEFAULT_USER_INFO_URL=
GOCHAT_OIDC_DEFAULT_JWKS_URL=
GOCHAT_OIDC_DEFAULT_SCOPES=openid,profile,email
# ---- Security ----
GOCHAT_RATE_LIMIT_REQUESTS_PER_MINUTE=100 # requests per minute per IP
GOCHAT_RATE_LIMIT_WINDOW_SECONDS=60 # seconds
GOCHAT_ADMIN_EMAIL=admin@example.com
GOCHAT_ADMIN_PASSWORD=CHANGE_ME_TO_A_STRONG_PASSWORD