优化结构

2026-08-23 00:38:33 +08:00
parent 64459574b2
commit 4e5071ee65
22 changed files with 301 additions and 127 deletions
@@ -0,0 +1,9 @@
+# Internal Security
+
+This package owns the application's administrator JWT policy. It is kept
+inside `internal` because its claims, audience, issuer and password-version
+fields are KRA-specific security protocol, not a reusable JWT utility.
+
+Generic stateless helpers may live in `pkg`, but admin token signing and
+verification stay here so other services cannot accidentally depend on this
+application's security contract.