禁止通过setUserInfo接口修改用户密码

piexlmax · piexlmax · commit 0b96ba300b71 · 2022-02-08T17:19:52.000+08:00
diff --git a/server/api/v1/system/sys_user.go b/server/api/v1/system/sys_user.go
@@ -275,6 +275,7 @@ func (b *BaseApi) SetUserInfo(c *gin.Context) {
 	var user system.SysUser
 	_ = c.ShouldBindJSON(&user)
 	user.Username = ""
+	user.Password = ""
 	if err := utils.Verify(user, utils.IdVerify); err != nil {
 		response.FailWithMessage(err.Error(), c)
 		return
@@ -299,6 +300,7 @@ func (b *BaseApi) SetSelfInfo(c *gin.Context) {
 	var user system.SysUser
 	_ = c.ShouldBindJSON(&user)
 	user.Username = ""
+	user.Password = ""
 	user.ID = utils.GetUserID(c)
 	if err, ReqUser := userService.SetUserInfo(user); err != nil {
 		global.GVA_LOG.Error("设置失败!", zap.Error(err))
