Audit fixes: LIVE symbols/fills/expiry/pending, security harden, add 更新说明.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-26 22:28:03 +08:00
parent bc8d1fb127
commit f48ea5bbcc
18 changed files with 1389 additions and 1069 deletions
@@ -25,6 +25,10 @@ class Settings(BaseSettings):
    auth_password: str = "admin123"
    auth_secret: str = "change-me-eth-hedge-sim-secret"
    auth_token_ttl_sec: int = 60 * 60 * 24 * 7
+    auth_token_version: int = 1  # 改密时递增，作废旧 token
+    disable_api_docs: bool = True  # 生产默认关闭 /docs
+    login_max_attempts: int = 8
+    login_window_sec: int = 300

    okx_api_key: str = ""
    okx_api_secret: str = ""