修复修改密码时未验证手机号所属账号的问题

2026-02-27 16:28:28 +08:00
parent 7a3c47f1d4
commit 8e42fad8aa
2 changed files with 11 additions and 3 deletions
--- a/web/handlers/user.go
+++ b/web/handlers/user.go
@@ -172,8 +172,13 @@ func UpdatePassword(c *fiber.Ctx) error {
 		return err
 	}

+	// 验证手机号
+	if req.Phone != authCtx.User.Phone {
+		return fiber.NewError(fiber.StatusBadRequest, "手机号码不正确")
+	}
+
 	// 验证手机令牌
-	if req.Phone == "" || req.Code == "" {
+	if req.Code == "" {
 		return fiber.NewError(fiber.StatusBadRequest, "手机号码和验证码不能为空")
 	}
 	err = s.Verifier.VerifySms(c.Context(), req.Phone, req.Code)