feat:升级功能、密码卡框架、主密钥接口

config/application.yml.example

@@ -6,8 +6,43 @@ server:
   port: 8080
 
 tms:
+  web:
+    cors:
+      enabled: true
+      allowed-origin-patterns:
+        - http://localhost:*
+        - http://127.0.0.1:*
+      allowed-methods:
+        - GET
+        - POST
+        - PUT
+        - DELETE
+        - OPTIONS
+      allowed-headers:
+        - Authorization
+        - Content-Type
+        - X-Requested-With
+        - X-Internal-Token
+        - X-App-Id
+        - X-Timestamp
+        - X-Nonce
+        - X-Signature
+        - X-Trace-Id
+      exposed-headers:
+        - X-Trace-Id
+      allow-credentials: true
+      max-age-seconds: 3600
+  upgrade:
+    staging-root-dir: /home/tmp/tms-upgrade-staging
+    log-dir: /home/tms/tmp/tms-upgrade-logs
+    signature-public-key-base64: change-me-base64-public-key-blob
   security:
     internal-token: change-me-internal-token
+    internal-auth:
+      enabled: true
+      debug-role-code: KEY_ADMIN
+      debug-auth-level: FULL
+      debug-session-token: DEBUG-BYPASS
     openapi:
       timestamp-skew-seconds: 300
       clients: