From 5bdd785261642ca2e6ad79b35b1fec7b139b4e62 Mon Sep 17 00:00:00 2001
From: Lewis Zou <zlzforever@163.com>
Date: Fri, 26 Jul 2024 10:48:03 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=E5=AE=89=E5=85=A8=20KEY=20?=
 =?UTF-8?q?=E5=8A=A0=E8=BD=BD=E6=97=B6=E9=97=B4=E4=B8=8D=E5=AF=B9=E7=9A=84?=
 =?UTF-8?q?=E9=94=99=E8=AF=AF?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/SecurityTokenService/Program.cs       | 12 +++++++++---
 src/SecurityTokenService/Startup.cs       | 17 ++++++++---------
 src/SecurityTokenService/appsettings.json |  2 +-
 3 files changed, 18 insertions(+), 13 deletions(-)

diff --git a/src/SecurityTokenService/Program.cs b/src/SecurityTokenService/Program.cs
index 3c9c2f2..445544c 100644
--- a/src/SecurityTokenService/Program.cs
+++ b/src/SecurityTokenService/Program.cs
@@ -1,8 +1,8 @@
 using System;
 using System.IO;
 using System.Linq;
+using System.Security.Cryptography;
 using System.Text;
-using IdentityServer4.Models;
 using Microsoft.AspNetCore.Hosting;
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.Hosting;
@@ -15,8 +15,14 @@ public class Program
     {
         public static void Main(string[] args)
         {
-            var secret = "secret".Sha256();
-            Console.WriteLine($"Secret: {secret}");
+            if (args.Contains("--g-aes-key"))
+            {
+                using Aes aes = Aes.Create();
+                aes.KeySize = 128; // 可以设置为 128、192 或 256 位
+                aes.GenerateKey();
+                Console.WriteLine("生成的 AES 密钥: " + Convert.ToBase64String(aes.Key));
+            }
+
             Encoding.RegisterProvider(CodePagesEncodingProvider.Instance);
 
             CreateHostBuilder(args).Build().Run();
diff --git a/src/SecurityTokenService/Startup.cs b/src/SecurityTokenService/Startup.cs
index 1110db5..42238fb 100644
--- a/src/SecurityTokenService/Startup.cs
+++ b/src/SecurityTokenService/Startup.cs
@@ -44,6 +44,14 @@ public void ConfigureServices(IServiceCollection services)
             // {
             //     keysFolder.Create();
             // }
+            // comments by lewis at 20240222
+            // 必须是 128、256 位
+
+            var dataProtectionKey = Configuration["DataProtection:Key"];
+            if (!string.IsNullOrEmpty(dataProtectionKey))
+            {
+                Util.DataProtectionKeyAes.Key = Encoding.UTF8.GetBytes(dataProtectionKey);
+            }
 
             services.AddControllers();
 
@@ -93,15 +101,6 @@ public void ConfigureServices(IServiceCollection services)
         // This method gets called by the runtime. Use this method to configure the HTTP request pipeline.
         public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
         {
-            // comments by lewis at 20240222
-            // 必须是 128、256 位
-
-            var dataProtectionKey = Configuration["DataProtection:Key"];
-            if (!string.IsNullOrEmpty(dataProtectionKey))
-            {
-                Util.DataProtectionKeyAes.Key = Encoding.UTF8.GetBytes(dataProtectionKey);
-            }
-
             var logger = app.ApplicationServices.GetRequiredService<ILoggerFactory>().CreateLogger("Startup");
             IdentitySeedData.Load(app);
 
diff --git a/src/SecurityTokenService/appsettings.json b/src/SecurityTokenService/appsettings.json
index 0a63043..df7ef93 100644
--- a/src/SecurityTokenService/appsettings.json
+++ b/src/SecurityTokenService/appsettings.json
@@ -59,7 +59,7 @@
     }
   },
   "DataProtection": {
-    "Key": "yD7wZi7jefkVwLM5"
+    "Key": ""
   },
   "Aliyun": {
     "AccessKey": "",