fix version 1

module/base/passport/internal/logic/forget/verify.go

@@ -4,10 +4,12 @@ import (
 	"context"
 	"time"
 
+	"bsm/full/module/base/passport/internal/impl"
 	"bsm/full/module/base/passport/internal/models"
 	"bsm/full/module/base/passport/internal/vars"
 	pb "bsm/full/module/base/passport/pb"
 	"git.apinb.com/bsm-sdk/core/errcode"
+	"git.apinb.com/bsm-sdk/core/printer"
 )
 
 // 验证手机号和验证码
@@ -25,6 +27,18 @@ func Verify(ctx context.Context, in *pb.ForgetVerifyRequest) (reply *pb.StatusRe
 		return nil, errcode.ErrPermissionDenied
 	}
 
+	// 真实校验短信验证码（一次性）
+	if err := models.VerifySmsCode(ctx, in.Phone, in.Code); err != nil {
+		return nil, err
+	}
+
+	// 校验通过后写入一次性重置票据，供 Reset 改密前校验，10 分钟有效
+	resetKey := vars.ForgetResetTokenPrefix + pa.Identity
+	if err := impl.RedisService.Client.Set(impl.RedisService.Ctx, resetKey, "1", 10*time.Minute).Err(); err != nil {
+		printer.Error("Set forget reset token by identity %v error:%v", pa.Identity, err)
+		return nil, errcode.ErrInternal
+	}
+
 	return &pb.StatusReply{
 		Timeseq: time.Now().UnixMilli(),
 	}, nil