bsm-infra/full
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: upgrade dependencies and secure passwords

Browse Source
This commit is contained in:
yanweidong
2026-08-10 12:53:23 +08:00
parent 1a1fa521c0
commit 581a503883
53 changed files with 298 additions and 143 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
module/ec/mall/internal/logic/staff/create.go
View File

@@ -6,7 +6,9 @@ import (
"bsm/full/module/ec/mall/internal/impl"
"bsm/full/module/ec/mall/internal/models"
"bsm/full/module/ec/mall/internal/password"
pb "bsm/full/module/ec/mall/pb"
"git.apinb.com/bsm-sdk/core/errcode"
"git.apinb.com/bsm-sdk/core/printer"
"git.apinb.com/bsm-sdk/core/service"
@@ -26,16 +28,18 @@ func Create(ctx context.Context, in *pb.StaffItem) (reply *pb.IdentityStatusRepl
return nil, errcode.ErrInvalidArgument
}
salt := utils.RandomString(8)
passwordHash, err := password.Hash(in.GetPassword())
if err != nil {
return nil, err
}
data := models.MallStaff{
Name: in.Name,
Account: in.Account,
Password: utils.Md5(in.Password + salt),
Password: passwordHash,
Profile: in.Profile,
Phone: in.Phone,
Email: in.Email,
Avatar: in.Avatar,
Salt: salt,
Role: "staff",
Std_IICUDS: types.Std_IICUDS{Status: 1},
}

5
module/ec/mall/internal/logic/staff/login.go
View File

@@ -9,11 +9,12 @@ import (
"bsm/full/module/ec/mall/internal/excode"
"bsm/full/module/ec/mall/internal/impl"
"bsm/full/module/ec/mall/internal/models"
"bsm/full/module/ec/mall/internal/password"
pb "bsm/full/module/ec/mall/pb"
"git.apinb.com/bsm-sdk/core/crypto/encipher"
"git.apinb.com/bsm-sdk/core/errcode"
"git.apinb.com/bsm-sdk/core/printer"
"git.apinb.com/bsm-sdk/core/utils"
"git.apinb.com/bsm-sdk/core/vars"
"gorm.io/gorm"
)
@@ -37,7 +38,7 @@ func Login(ctx context.Context, in *pb.LoginRequest) (reply *pb.LoginReply, err
return nil, errcode.ErrDB
}
// 密码校验 - 使用MD5加盐验证
if record.Password != utils.Md5(in.Password+record.Salt) {
if !password.Verify(record.Password, in.Password) {
return nil, errcode.ErrPassword
}

19
module/ec/mall/internal/logic/staff/set_password.go
View File

@@ -6,28 +6,32 @@ import (
"bsm/full/module/ec/mall/internal/impl"
"bsm/full/module/ec/mall/internal/models"
"bsm/full/module/ec/mall/internal/password"
pb "bsm/full/module/ec/mall/pb"
"git.apinb.com/bsm-sdk/core/errcode"
"git.apinb.com/bsm-sdk/core/printer"
"git.apinb.com/bsm-sdk/core/service"
"git.apinb.com/bsm-sdk/core/utils"
)
// SetPassword 设置账号密码
// SetPassword sets the authenticated staff password.
func SetPassword(ctx context.Context, in *pb.SetAccountRequest) (reply *pb.IdentityStatusReply, err error) {
// parse authorization meta.
auth, err := service.ParseMetaCtx(ctx, &service.ParseOptions{RoleValue: "Mall_Admin"})
if err != nil {
return nil, err
}
if in.Password == "" || in.Password != in.PasswordConfirmed {
return nil, errcode.ErrInvalidArgument
}
salt := utils.RandomString(8)
pwd := utils.Md5(in.Password + salt)
err = impl.DBService.Where("id = ?", auth.ID).Updates(&models.MallStaff{Salt: salt, Password: pwd}).Error
passwordHash, err := password.Hash(in.Password)
if err != nil {
return nil, err
}
err = impl.DBService.Where("id = ?", auth.ID).Updates(&models.MallStaff{
Salt: "",
Password: passwordHash,
}).Error
if err != nil {
printer.Error(err.Error())
return nil, errcode.ErrDB
@@ -38,5 +42,4 @@ func SetPassword(ctx context.Context, in *pb.SetAccountRequest) (reply *pb.Ident
Message: "OK",
Timeseq: time.Now().UnixMilli(),
}, nil
}