Function ensure_security_settings

core/config.py:43–61

()

async def ensure_security_settings() -> None:
    config_record = await KeyValue.filter(key="settings").first()
    if not config_record:
        return

    current_config = {**DEFAULT_CONFIG, **(config_record.value or {})}
    security_config = prepare_security_config(current_config)
    if not security_config.changed:
        return

    config_record.value = security_config.config
    await config_record.save()
    if security_config.setup_required:
        logger.warning("检测到空密码或旧版默认管理员密码，请通过初始化页面重新设置")
    elif security_config.password_hashed:
        logger.info("已将管理员密码迁移为哈希存储")
    if security_config.jwt_secret_rotated:
        logger.info("已生成独立 JWT 签名密钥")
    await refresh_settings()


def _sync_ip_limits() -> None: