chengma/cmautobuy
2
0
Fork 0
Code Issues 89 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 用户密码最小长度调整为六位 (#55)

Browse Source
This commit is contained in:
chengma
2026-08-09 16:14:58 +08:00
parent ac9e227ee7
commit 2cce9e3888
10 changed files with 39 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/service/user_test.go
+5 -5
View File
@@ -16,7 +16,7 @@ func TestCreatePurchaser_固定角色且用户名不区分大小写唯一(t *tes
db := newSyncTestDB(t)
now := time.Date(2026, 8, 9, 8, 0, 0, 0, time.UTC)
admin := prepareAdminUser(t, db, now)
if err := CreatePurchaser(db, admin, "buyer", "buyer-password", "buyer-password", now); err != nil {
if err := CreatePurchaser(db, admin, "buyer", "123456", "123456", now); err != nil {
t.Fatalf("创建采购员失败: %v", err)
}
buyer, err := repository.FindUserByUsername(db, "BUYER")
@@ -26,8 +26,8 @@ func TestCreatePurchaser_固定角色且用户名不区分大小写唯一(t *tes
if buyer.Role != model.RolePurchaser || buyer.Status != model.UserActive {
t.Fatalf("新账号角色或状态错误: %+v", buyer)
}
if buyer.PasswordHash == "buyer-password" ||
bcrypt.CompareHashAndPassword([]byte(buyer.PasswordHash), []byte("buyer-password")) != nil {
if buyer.PasswordHash == "123456" ||
bcrypt.CompareHashAndPassword([]byte(buyer.PasswordHash), []byte("123456")) != nil {
t.Fatal("采购员密码必须保存为可验证的 bcrypt 哈希")
}
if err := CreatePurchaser(db, admin, "BUYER", "other-password", "other-password", now); !errors.Is(err, repository.ErrUsernameExists) {
@@ -73,7 +73,7 @@ func TestResetUserPassword_原子撤销Session并更换凭据(t *testing.T) {
}
buyer, _ := repository.FindUserByUsername(db, "buyer")
token, _, _, _ := Login(db, "buyer", "old-password", now)
if err := ResetUserPassword(db, admin, buyer.UserID, "new-password", "new-password", now.Add(time.Minute)); err != nil {
if err := ResetUserPassword(db, admin, buyer.UserID, "654321", "654321", now.Add(time.Minute)); err != nil {
t.Fatal(err)
}
if _, err := Authenticate(db, token, now.Add(2*time.Minute)); !errors.Is(err, ErrUnauthenticated) {
@@ -82,7 +82,7 @@ func TestResetUserPassword_原子撤销Session并更换凭据(t *testing.T) {
if _, _, _, err := Login(db, "buyer", "old-password", now.Add(2*time.Minute)); !errors.Is(err, ErrInvalidCredentials) {
t.Fatalf("旧密码应失效，实际 %v", err)
}
if _, _, _, err := Login(db, "buyer", "new-password", now.Add(2*time.Minute)); err != nil {
if _, _, _, err := Login(db, "buyer", "654321", now.Add(2*time.Minute)); err != nil {
t.Fatalf("新密码应可登录: %v", err)
}
}