fix: lower admin password minimum

2026-08-22 21:13:57 +08:00
parent 716c2917d4
commit 78c42eff53
7 changed files with 32 additions and 16 deletions
@@ -37,7 +37,8 @@ public sealed class AdminAccountsController(AppDbContext db) : ControllerBase
    public async Task<IActionResult> Create(CreateAdminUserRequest request, CancellationToken ct)
    {
        var username = request.Username.Trim();
-        if (username.Length is < 3 or > 64 || request.Password.Length is < 12 or > 128 ||
+        if (username.Length is < 3 or > 64 ||
+            request.Password.Length is < AdminPasswordPolicy.MinLength or > AdminPasswordPolicy.MaxLength ||
            !AdminRoles.All.Contains(request.Role))
            return BadRequest(new ApiError("ADMIN_ACCOUNT_INVALID", "管理员账号、密码或角色无效"));
        if (await db.AdminUsers.AnyAsync(item => item.Username == username, ct))
@@ -90,8 +91,8 @@ public sealed class AdminAccountsController(AppDbContext db) : ControllerBase
        ResetAdminPasswordRequest request,
        CancellationToken ct)
    {
-        if (request.Password.Length is < 12 or > 128)
-            return BadRequest(new ApiError("ADMIN_PASSWORD_INVALID", "密码长度必须为 12 到 128 位"));
+        if (request.Password.Length is < AdminPasswordPolicy.MinLength or > AdminPasswordPolicy.MaxLength)
+            return BadRequest(new ApiError("ADMIN_PASSWORD_INVALID", "密码长度必须为 6 到 128 位"));
        var user = await db.AdminUsers.FindAsync([id], ct);
        if (user is null) return NotFound();
        user.PasswordHash = AdminSessionService.HashPassword(request.Password);