fix(api): relax account password validation

backend/api/internal/logic/platform/auth.go

@@ -19,7 +19,7 @@ import (
 // LoginRequest 是平台总后台的账号密码登录请求。
 type LoginRequest struct {
 	Username string `json:"username" binding:"required,max=64"`
-	Password string `json:"password" binding:"required,min=8,max=128"`
+	Password string `json:"password" binding:"required"`
 }
 
 // LoginReply 是后台登录成功后的访问凭证与账号状态。
@@ -122,8 +122,8 @@ func CurrentProfile(ctx *gin.Context) {
 
 // ChangePasswordRequest 是已登录账号的改密请求。
 type ChangePasswordRequest struct {
-	CurrentPassword string `json:"current_password" binding:"required,min=8,max=128"`
-	NewPassword     string `json:"new_password" binding:"required,min=12,max=128"`
+	CurrentPassword string `json:"current_password" binding:"required"`
+	NewPassword     string `json:"new_password" binding:"required"`
 }
 
 // ChangePassword 修改当前账号密码并解除首次登录改密限制。
@@ -138,6 +138,10 @@ func ChangePassword(ctx *gin.Context) {
 		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
 		return
 	}
+	if !common.IsValidAccountPassword(request.NewPassword) {
+		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
+		return
+	}
 	var account models.PlatformAccount
 	if err := impl.DBService.Where("identity = ?", claims.Identity).First(&account).Error; err != nil {
 		infra.Response.Error(ctx, errcode.ErrRecordNotFound)

backend/api/internal/logic/platform/delivery/account.go

@@ -14,7 +14,7 @@ import (
 
 type accountRequest struct {
 	Username              string `json:"username" binding:"required,max=64"`
-	Password              string `json:"password" binding:"required,min=8,max=128"`
+	Password              string `json:"password" binding:"required"`
 	DisplayName           string `json:"display_name" binding:"max=64"`
 	RoleCode              string `json:"role_code" binding:"max=64"`
 	DeliveryBasicIdentity string `json:"delivery_basic_identity"`
@@ -50,6 +50,10 @@ func CreateDeliveryAccount(ctx *gin.Context) {
 		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
 		return
 	}
+	if !common.IsValidAccountPassword(request.Password) {
+		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
+		return
+	}
 	deliveryBasicID, err := common.ResolveIdentityID(&models.DeliveryBasic{}, request.DeliveryBasicIdentity, true)
 	if err != nil {
 		infra.Response.Error(ctx, errcode.ErrInvalidArgument)

backend/api/internal/logic/platform/gas/account.go

@@ -14,7 +14,7 @@ import (
 
 type accountRequest struct {
 	Username              string `json:"username" binding:"required,max=64"`
-	Password              string `json:"password" binding:"required,min=8,max=128"`
+	Password              string `json:"password" binding:"required"`
 	DisplayName           string `json:"display_name" binding:"max=64"`
 	RoleCode              string `json:"role_code" binding:"max=64"`
 	GasBasicIdentity      string `json:"gas_basic_identity"`
@@ -49,6 +49,10 @@ func CreateGasAccount(ctx *gin.Context) {
 		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
 		return
 	}
+	if !common.IsValidAccountPassword(request.Password) {
+		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
+		return
+	}
 	gasBasicID, err := common.ResolveIdentityID(&models.GasBasic{}, request.GasBasicIdentity, true)
 	if err != nil {
 		infra.Response.Error(ctx, errcode.ErrInvalidArgument)

backend/api/internal/logic/platform/platform/account.go

@@ -36,7 +36,7 @@ func ListPlatformAccount(ctx *gin.Context) {
 
 type platformAccountRequest struct {
 	Username         string `json:"username" binding:"required,max=64"`
-	Password         string `json:"password" binding:"required,min=8,max=128"`
+	Password         string `json:"password" binding:"required"`
 	DisplayName      string `json:"display_name" binding:"max=64"`
 	Avatar           string `json:"avatar" binding:"max=512"`
 	PlatformRoleCode string `json:"platform_role_code" binding:"required,max=64"`
@@ -70,6 +70,10 @@ func CreatePlatformAccount(ctx *gin.Context) {
 		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
 		return
 	}
+	if !common.IsValidAccountPassword(request.Password) {
+		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
+		return
+	}
 	if !isAssignablePlatformRole(request.PlatformRoleCode) {
 		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
 		return

backend/api/internal/logic/platform/staff/staff.go

@@ -51,7 +51,7 @@ func GetStaff(ctx *gin.Context) { common.GetByIdentity[models.StaffAccount](ctx)
 func CreateStaff(ctx *gin.Context) {
 	var request struct {
 		Username              string `json:"username" binding:"required,max=64"`
-		Password              string `json:"password" binding:"required,min=8,max=128"`
+		Password              string `json:"password" binding:"required"`
 		Name                  string `json:"name" binding:"required,max=64"`
 		Phone                 string `json:"phone" binding:"max=32"`
 		Avatar                string `json:"avatar" binding:"max=512"`
@@ -60,7 +60,9 @@ func CreateStaff(ctx *gin.Context) {
 		DeliveryBasicIdentity string `json:"delivery_basic_identity"`
 		WorkStatus            string `json:"work_status" binding:"max=32"`
 	}
-	if err := ctx.ShouldBindJSON(&request); err != nil || !validStaffRole(request.RoleCode) {
+	if err := ctx.ShouldBindJSON(&request); err != nil ||
+		!common.IsValidAccountPassword(request.Password) ||
+		!validStaffRole(request.RoleCode) {
 		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
 		return
 	}

backend/api/internal/logic/platform/user/user.go

@@ -19,7 +19,7 @@ func GetUser(ctx *gin.Context) { common.GetByIdentity[models.UserAccount](ctx) }
 func CreateUser(ctx *gin.Context) {
 	var request struct {
 		Username string `json:"username" binding:"required,max=64"`
-		Password string `json:"password" binding:"required,min=8,max=128"`
+		Password string `json:"password" binding:"required"`
 		Name     string `json:"name" binding:"required,max=64"`
 		Phone    string `json:"phone" binding:"max=32"`
 		Avatar   string `json:"avatar" binding:"max=512"`
@@ -29,6 +29,10 @@ func CreateUser(ctx *gin.Context) {
 		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
 		return
 	}
+	if !common.IsValidAccountPassword(request.Password) {
+		infra.Response.Error(ctx, errcode.ErrInvalidArgument)
+		return
+	}
 	hash, err := common.PasswordHash(request.Password)
 	if err != nil {
 		infra.Response.Error(ctx, err)