feat: 移除配置文件中的管理员用户名和密码，增强安全性

backend/configs/config.dev.yaml

@@ -23,9 +23,6 @@ auth:
     secret: "license-manager-dev-secret-key-32-bytes"
     expire_hours: 1
     refresh_threshold_minutes: 30
-  admin:
-    username: "admin"
-    password: "admin@123"
   security:
     max_login_attempts: 5
     lockout_duration_minutes: 15

backend/configs/config.example.yaml

@@ -24,9 +24,6 @@ auth:
     secret: "license-manager-dev-secret-key-32-bytes" # 32字节的随机字符串
     expire_hours: 1 # 1小时后过期
     refresh_threshold_minutes: 30 # 30分钟后可刷新token
-  admin:
-    username: "admin"
-    password: "admin@123"
   security:
     max_login_attempts: 5 # 5次失败后锁定15分钟
     lockout_duration_minutes: 15 # 15分钟后解锁

backend/configs/config.prod.yaml

@@ -23,9 +23,6 @@ auth:
     secret: "please-change-in-prod"
     expire_hours: 1
     refresh_threshold_minutes: 30
-  admin:
-    username: "admin"
-    password: "changeMe!"
   security:
     max_login_attempts: 5
     lockout_duration_minutes: 15

backend/configs/config.yaml

@@ -23,9 +23,6 @@ auth:
     secret: "license-manager-dev-secret-key-32-bytes" # 32字节的随机字符串
     expire_hours: 1 # 1小时后过期
     refresh_threshold_minutes: 30 # 30分钟后可刷新token
-  admin:
-    username: "admin"
-    password: "admin@123"
   security:
     max_login_attempts: 5 # 5次失败后锁定15分钟
     lockout_duration_minutes: 15 # 15分钟后解锁

backend/docs/modules_design/login&auth.md

@@ -13,7 +13,7 @@
 
 ## 社区版登录设计
 
-用户名和密码配置在配置文件中，默认用户名和密码为 `admin` / `admin@123`
+用户名和密码硬编码在系统中，默认用户名和密码为 `admin` / `admin@123`
 
 ## 功能模块
 

backend/internal/config/config.go

@@ -40,7 +40,6 @@ type DatabaseConfig struct {
 
 type AuthConfig struct {
 	JWT      JWTConfig      `mapstructure:"jwt"`
-	Admin    AdminConfig    `mapstructure:"admin"`
 	Security SecurityConfig `mapstructure:"security"`
 }
 
@@ -50,11 +49,6 @@ type JWTConfig struct {
 	RefreshThresholdMinutes int    `mapstructure:"refresh_threshold_minutes"`
 }
 
-type AdminConfig struct {
-	Username string `mapstructure:"username"`
-	Password string `mapstructure:"password"`
-}
-
 type SecurityConfig struct {
 	MaxLoginAttempts       int `mapstructure:"max_login_attempts"`
 	LockoutDurationMinutes int `mapstructure:"lockout_duration_minutes"`
@@ -137,9 +131,6 @@ func setDefaults() {
 	viper.SetDefault("auth.jwt.expire_hours", 1)
 	viper.SetDefault("auth.jwt.refresh_threshold_minutes", 30)
 
-	viper.SetDefault("auth.admin.username", "admin")
-	viper.SetDefault("auth.admin.password", "admin@123")
-	
 	viper.SetDefault("auth.security.max_login_attempts", 5)
 	viper.SetDefault("auth.security.lockout_duration_minutes", 15)
 

docs/github镜像部署.md

@@ -25,7 +25,7 @@ docker run --rm -v $(pwd):/tmp/extract ghcr.io/cedar-v/license-manager-frontend:
 ### 2. 启动服务
 
 ```bash
-docker-compose -f docker-compose.github.image.yml up -d
+docker-compose -f docker-compose.github.image.yml up
 ```
 
 ### 3. 检查服务状态
@@ -43,7 +43,7 @@ docker-compose -f docker-compose.github.image.yml ps
 ## 默认账号
 
 - **用户名**: admin
-- **密码**: changeMe!
+- **密码**: admin@123
 
 ## 停止服务