chore: upgrade dependencies and secure passwords

module/ec/mall/internal/logic/staff/set_password.go

@@ -6,28 +6,32 @@ import (
 
 	"bsm/full/module/ec/mall/internal/impl"
 	"bsm/full/module/ec/mall/internal/models"
+	"bsm/full/module/ec/mall/internal/password"
 	pb "bsm/full/module/ec/mall/pb"
+
 	"git.apinb.com/bsm-sdk/core/errcode"
 	"git.apinb.com/bsm-sdk/core/printer"
 	"git.apinb.com/bsm-sdk/core/service"
-	"git.apinb.com/bsm-sdk/core/utils"
 )
 
-// SetPassword 设置账号密码
+// SetPassword sets the authenticated staff password.
 func SetPassword(ctx context.Context, in *pb.SetAccountRequest) (reply *pb.IdentityStatusReply, err error) {
-	// parse authorization meta.
 	auth, err := service.ParseMetaCtx(ctx, &service.ParseOptions{RoleValue: "Mall_Admin"})
 	if err != nil {
 		return nil, err
 	}
-
 	if in.Password == "" || in.Password != in.PasswordConfirmed {
 		return nil, errcode.ErrInvalidArgument
 	}
 
-	salt := utils.RandomString(8)
-	pwd := utils.Md5(in.Password + salt)
-	err = impl.DBService.Where("id = ?", auth.ID).Updates(&models.MallStaff{Salt: salt, Password: pwd}).Error
+	passwordHash, err := password.Hash(in.Password)
+	if err != nil {
+		return nil, err
+	}
+	err = impl.DBService.Where("id = ?", auth.ID).Updates(&models.MallStaff{
+		Salt:     "",
+		Password: passwordHash,
+	}).Error
 	if err != nil {
 		printer.Error(err.Error())
 		return nil, errcode.ErrDB
@@ -38,5 +42,4 @@ func SetPassword(ctx context.Context, in *pb.SetAccountRequest) (reply *pb.Ident
 		Message: "OK",
 		Timeseq: time.Now().UnixMilli(),
 	}, nil
-
 }