From ec86d9d1339f4a28a689b5545ac3ea3fa591cfc3 Mon Sep 17 00:00:00 2001
From: zhizhijie <zhizhijie@users.noreply.gitee.com>
Date: 星期六, 26 九月 2026 12:26:33 +0800
Subject: [PATCH] chore(配置安全): 本机真实值改用 Windows 用户环境变量(不落文件)，start-dev.ps1 加注册表兜底；清理仓库内历史明文 key + 文档补充
---
docs/功能测试报告/功能测试报告_密钥外部化与打包去密_2026-09-26.md | 74 +++++++++++++++++++++++++++++++++++++
1 files changed, 74 insertions(+), 0 deletions(-)
diff --git "a/docs/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212_\345\257\206\351\222\245\345\244\226\351\203\250\345\214\226\344\270\216\346\211\223\345\214\205\345\216\273\345\257\206_2026-09-26.md" "b/docs/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212_\345\257\206\351\222\245\345\244\226\351\203\250\345\214\226\344\270\216\346\211\223\345\214\205\345\216\273\345\257\206_2026-09-26.md"
new file mode 100644
index 0000000..f465b04
--- /dev/null
+++ "b/docs/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212/\345\212\237\350\203\275\346\265\213\350\257\225\346\212\245\345\221\212_\345\257\206\351\222\245\345\244\226\351\203\250\345\214\226\344\270\216\346\211\223\345\214\205\345\216\273\345\257\206_2026-09-26.md"
@@ -0,0 +1,74 @@
+# 鍔熻兘娴嬭瘯鎶ュ憡锛氬瘑閽ュ閮ㄥ寲涓庢墦鍖呭幓瀵嗭紙2026-09-26锛�
+
+> 鏃ユ湡锛�2026-09-26銆�妯″潡锛氶厤缃�/鎵撳寘锛坱raffic-audit-server 閰嶇疆鍒嗗眰 + .gitignore + 閮ㄧ讲璇存槑锛夈��娴嬭瘯浜猴細Codex
+> 璧峰洜锛氭鏌ラ儴缃插寘 `E:\璇曢獙\traffic-audit-deploy-20260913` 鏃跺彂鐜扳�斺�斿灞� `backend/application.yml` 鏄共鍑�鐨勫崰浣嶇増锛屼絾 **jar 鍐呯疆鐨� `BOOT-INF/classes/application.yml` 閲屽甫鐫�鐪熷疄瀵嗛挜**锛圖eepSeek API key銆佹湰鏈烘暟鎹簱鍙ｄ护銆丣WT 瀵嗛挜锛夈��
+
+## 涓�銆佸姛鑳借鏄庯紙鏀瑰姩锛�
+
+1. **杩� jar 鐨勯厤缃竴寰嬪崰浣嶇**锛歚traffic-audit-server/src/main/resources/application.yml`
+ - `spring.datasource.url: ${TRAFFIC_DB_URL:...}`銆乣username: ${TRAFFIC_DB_USER:root}`銆乣password: ${TRAFFIC_DB_PASSWORD:}`锛堥粯璁ょ┖锛�
+ - `jwt.secret: ${TRAFFIC_JWT_SECRET:traffic-audit-dev-jwt-secret-change-me}`
+ - `deepseek.api-key: ${DEEPSEEK_API_KEY:}`锛堥粯璁ょ┖锛�
+ 鈫� 鎵撳寘鍑虹殑 jar **涓嶅啀鍖呭惈浠讳綍鐪熷疄瀵嗛挜**銆�
+2. **鏈満寮�鍙戠殑鐪熷疄鍊煎崟鐙斁**锛氭柊寤� `traffic-audit-server/config/application.yml`锛堜繚瀛樻暟鎹簱鍙ｄ护銆丣WT銆丏eepSeek key锛夛紝
+ Spring Boot 榛樿鍔犺浇 `file:./config/application.yml`锛屼紭鍏堢骇楂樹簬 classpath 鐨勫悓鍚嶉厤缃� 鈫� 鏈満 `mvn spring-boot:run` 琛屼负涓嶅彉銆�
+ 璇ユ枃浠跺凡鍔犲叆 `.gitignore`锛堢 106 琛岋級锛�**鏃笉杩涗粨搴撱�佷篃涓嶈繘 jar**銆�
+3. **閮ㄧ讲璇存槑琛ュ厖**锛歚docs/鎵撳寘閮ㄧ讲璇存槑.md` 澧炲姞"瀵嗛挜涓庨厤缃�"涓�鑺傦紙鍚湇鍔″櫒涓婅疆鎹� key 鐨勬楠わ級銆�
+
+## 浜屻�佹祴璇曠幆澧�
+
+鍚庣 `mvn -q spring-boot:run -f traffic-audit-server/pom.xml`锛�8090锛夛紱MySQL 鏈満 `localhost:3308/traffic_audit`锛涜处鍙� admin/123456銆�
+
+## 涓夈�佺敤渚嬭〃
+
+| 缂栧彿 | 杈撳叆 | 棰勬湡 | 瀹為檯 | 缁撹 |
+| --- | --- | --- | --- | --- |
+| TC-1 | 鍚姩鍚庣锛堟湰鏈鸿鐩栨枃浠跺瓨鍦級 | 姝ｅ父鍚姩 | 鏃ュ織鍑虹幇 `Started TrafficAuditApplication` | 閫氳繃 |
+| TC-2 | `POST /api/auth/login`锛坅dmin/123456锛� | 搴撳彛浠ゅ彇鑷� `config/application.yml` | 鐧诲綍鎴愬姛銆佽繑鍥� token锛堣嫢瑕嗙洊鏂囦欢鏈敓鏁堬紝鍗犱綅绗﹂粯璁ょ┖鍙ｄ护浼氳繛涓嶄笂搴擄級 | 閫氳繃 |
+| TC-3 | `POST /api/llm/chat`锛�"鍙洖澶嶄袱涓瓧锛氭敹鍒�"锛� | DeepSeek key 鍙栬嚜 `config/application.yml` | HTTP 200銆佸洖绛�"鏀跺埌" | 閫氳繃 |
+| TC-4 | 杩� jar 鐨� `application.yml` 鍐呭 | 鏃犵湡瀹炲瘑閽� | 涓夊鍧囦负 `${...}` 鍗犱綅绗︼紙鍙ｄ护涓� api-key 榛樿绌猴級 | 閫氳繃 |
+| TC-5 | `git check-ignore` | 鏈満鐪熷疄閰嶇疆涓嶈繘搴� | `.gitignore:106 traffic-audit-server/config/application.yml` | 閫氳繃 |
+| TC-6 | `git grep -E "sk-[A-Za-z0-9]{16,}"` | 璺熻釜鏂囦欢閲屾棤瀵嗛挜 | 鏃犲懡涓紙鍙︼細09-23 鍓嶆牳鏌ヨ繃 git 鍘嗗彶涔熸棤鍛戒腑锛� | 閫氳繃 |
+| TC-7 | 浠撳簱鍐呬袱浠介儴缃叉ā鏉匡紙`deploy/.../backend/application.yml`銆乣_deploytest/application.yml`锛� | 鏃犵湡瀹炲瘑閽� | 鍧囦负銆岃鏀规垚浣犵殑鏁版嵁搴撳瘑鐮併��+ `api-key: ""` | 閫氳繃 |
+
+## 鍥涖�佸彂鐜扮殑闂涓庡缃�
+
+1. **jar 鍐呯疆閰嶇疆甯︾湡瀹炲瘑閽�**锛堟湰娆℃牴鍥狅級锛歋pring Boot 澶栭儴閰嶇疆浼樺厛绾ф洿楂橈紝鎵�浠ョ嚎涓婅繍琛屾椂鐢ㄧ殑鏄閮ㄥ�笺�佸姛鑳戒笂娌″彈褰卞搷锛涗絾 jar 鍙В鍘嬶紝鏄庢枃瀵嗛挜灏卞湪閲岄潰锛堜簩杩涘埗閲屾悳涓嶅埌 `sk-` 鏄洜涓鸿 zip 鍘嬬缉锛岃В鍘嬪嵆瑙侊級銆�
+ 鈫� 宸叉寜涓婅堪鏂规鏍规不锛�**浠ュ悗鎵撳寘涓嶄細鍐嶆妸瀵嗛挜鎵撹繘 jar**銆�
+2. **宸插甫鍑哄幓鐨勯偅浠� jar 鏃犳硶鏀跺洖**锛氶噷闈㈢殑 key 浠嶅湪銆傚缃缓璁紙蹇呴』鍋氾級锛�
+ - 鍒� DeepSeek 鎺у埗鍙�**鏂板缓涓�涓� key 骞跺垹闄ゆ棫鐨�**锛堟棫 key 绔嬪嵆澶辨晥锛宩ar 閲岀殑閭ｄ唤灏卞簾浜嗭級锛�
+ - 鍘婚偅鍙版湇鍔″櫒涓婃妸澶栭儴 `backend/application.yml` 鐨� `deepseek.api-key` 鎹㈡垚鏂� key锛堟垨鐩存帴鐣欑┖锛孉I 鍒嗘瀽灏变笉鐢級锛�
+ - 閲嶅惎鍚庣锛坄start-backend.cmd`锛夛紝鍦ㄩ〉闈㈢偣涓�娆� AI 鍒嗘瀽纭鍙敤銆�
+3. 鏈満鏁版嵁搴� root 鍙ｄ护鍚屾牱鍦ㄦ棫 jar 閲岋細鑻ラ偅鍙版湇鍔″櫒鐢ㄨ繃鍚屼竴鍙ｄ护锛屽缓璁竴骞舵敼鎺夛紙閮ㄧ讲妯℃澘鏈潵灏辫姹傜幇鍦烘敼锛夈��
+
+## 浜斻�佺粨璁�
+
+閰嶇疆鍒嗗眰鏀归�犲畬鎴愬苟閫氳繃 7 鏉＄敤渚嬶細杩� jar 鐨勫彧鏈夊崰浣嶇锛岀湡瀹炲�间粎瀛樺湪浜庢湰鏈烘湭璺熻釜鏂囦欢鎴栫幆澧冨彉閲忥紱鏈満寮�鍙戜笌绾夸笂閮ㄧ讲琛屼负鍧囨湭閫�鍖栥�傝疆鎹� key 鐨勬楠ゅ凡鍐欏叆閮ㄧ讲璇存槑銆�
+
+## 鍏�佺浜岃疆锛堝悓鏃ユ櫄锛岀敤鎴峰悓鎰忓悗杩藉姞锛夛細鏈満涔熶笉鐣欐槑鏂�
+
+1. **鏈満鐪熷疄鍊兼敼涓� Windows 鐢ㄦ埛鐜鍙橀噺**锛堜笉鍐嶈惤鏂囦欢锛夛細
+ ```powershell
+ setx TRAFFIC_DB_PASSWORD "鏈満 MySQL 鍙ｄ护"
+ setx DEEPSEEK_API_KEY "DeepSeek key"
+ ```
+ `traffic-audit-server/config/application.yml` 鏀规垚"鍙湁璇存槑銆佹棤鏄庢枃"鐨勬敞閲婃枃浠讹紙鍊煎叏閮ㄧ敱鐜鍙橀噺鎻愪緵锛夈��
+2. **start-dev.ps1 鍔犳敞鍐岃〃鍏滃簳**锛氳嫢褰撳墠 shell 鏄棫杩涚▼銆佹嬁涓嶅埌鏂拌鍙橀噺锛屽垯浠� `HKCU\Environment` 璇诲彇骞舵敞鍏ュ悗绔繘绋嬶紝閬垮厤"鏂囦欢閲屾病鏈夈�佺幆澧冨彉閲忎篃璇讳笉鍒�"鐨勭┖妗ｃ��
+3. **娓呯悊浠撳簱鍐呭惈 key 鐨勫巻鍙叉枃浠�**锛堟湭璺熻釜/宸插拷鐣ワ紝闈炴彁浜ゅ唴瀹癸級锛�
+ | 鏂囦欢 | 鍛戒腑 |
+ | --- | --- |
+ | `_shots/all_events.json` | 13 澶� |
+ | `_dep_readme.txt` | 1 澶� |
+ 鈫� 鍏ㄩ儴鏇挎崲涓� `sk-REDACTED`锛屽鏌ュ叏浠撳簱**宸叉棤鏄庢枃 key**銆�
+
+### 杩藉姞鐢ㄤ緥
+
+| 缂栧彿 | 杈撳叆 | 棰勬湡 | 瀹為檯 | 缁撹 |
+| --- | --- | --- | --- | --- |
+| TC-8 | `start-dev.ps1`锛堝湪鏈户鎵挎柊鍙橀噺鐨� shell 閲岋級 | 鑷姩浠庢敞鍐岃〃杞藉叆 | 杈撳嚭"宸蹭粠鐢ㄦ埛鐜鍙橀噺杞藉叆 TRAFFIC_DB_PASSWORD / DEEPSEEK_API_KEY" | 閫氳繃 |
+| TC-9 | 鍚姩鍚庣櫥褰� `admin/123456` | 搴撳彛浠ゅ彇鑷幆澧冨彉閲� | 鐧诲綍鎴愬姛銆乼oken 156 瀛楃 | 閫氳繃 |
+| TC-10 | `POST /api/llm/chat` | key 鍙栬嚜鐜鍙橀噺 | HTTP 200銆佸洖绛�"鏀跺埌" | 閫氳繃 |
+| TC-11 | 鍏ㄤ粨搴撴壂鎻� `sk-[A-Za-z0-9]{16,}` | 鏃犳槑鏂� | 娓呯悊鍚庡鏌ヤ负 0 | 閫氳繃 |
+| TC-12 | `traffic-audit-server/config/application.yml` | 鏃犳槑鏂� | 浠呮敞閲婅鏄庯紙鍊艰蛋鐜鍙橀噺锛� | 閫氳繃 |
+
+> 璇存槑锛氱幆澧冨彉閲忔湰韬粛鏄湰鏈烘槑鏂囷紙瀛樺湪娉ㄥ唽琛� `HKCU\Environment`锛夛紝閫傚悎鍗曟満寮�鍙戯紱鍗忎綔/鐢熶骇璇风敤閮ㄧ讲鏈哄閮ㄩ厤缃垨瀵嗛挜绠＄悊宸ュ叿銆傝疆鎹� key 浠嶆槸鏍规不娉勯湶鐨勫敮涓�鎵嬫銆�
--
Gitblit v1.9.1