使用公共默认身份验证密钥

AiToEarn contains public default values for authentication secrets. The Electron server uses a static fallback for AUTH_SECRET to sign and verify JWTs. The JWT payload contains isManager, and ManagerGuard grants manager access when this claim is true. The backend configuration also contains a static internalToken. The shared authentication guard accepts this value directly as a Bearer token without JWT verification or user lookup. Internal controllers protected by @Internal() therefore rely on this publicly known value as their only authentication factor.