chore: update auth security

This commit is contained in:
duorameng
2026-04-27 14:14:36 +08:00
parent cf9acf3ea0
commit 5a8baf7a0b
4 changed files with 22 additions and 15 deletions
+1
View File
@@ -404,6 +404,7 @@ func (c *AgentController) WSConnect(ctx *gin.Context) {
logger.Errorf("[AgentWS] 升级连接失败: %v, Agent #%s, IP=%s", err, agent.ID, ip)
return
}
conn.SetReadLimit(constant.MaxMessageSize)
// 连接成功,重置失败计数
c.wsManager.RecordConnectSuccess(ip)
+15 -13
View File
@@ -181,19 +181,21 @@ func (ac *AuthController) GetCurrentUser(c *gin.Context) {
}
func (ac *AuthController) Register(c *gin.Context) {
var req struct {
Username string `json:"username" binding:"required"`
Email string `json:"email" binding:"required"`
Password string `json:"password" binding:"required"`
}
/*
var req struct {
Username string `json:"username" binding:"required"`
Email string `json:"email" binding:"required"`
Password string `json:"password" binding:"required"`
}
if err := c.ShouldBindJSON(&req); err != nil {
utils.BadRequest(c, err.Error())
return
}
if err := c.ShouldBindJSON(&req); err != nil {
utils.BadRequest(c, err.Error())
return
}
// 安全性:强制设定角色为 user,防止注册时篡改角色为 admin
// 修复原代码中 email 和 password 参数位置颠倒的问题
user := ac.userService.CreateUser(req.Username, req.Password, req.Email, constant.DefaultRole)
utils.Success(c, vo.ToUserVO(user))
// 安全性:强制设定角色为 user,防止注册时篡改角色为 admin
user := ac.userService.CreateUser(req.Username, req.Password, req.Email, constant.DefaultRole)
utils.Success(c, vo.ToUserVO(user))
*/
utils.BadRequest(c, "注册功能已关闭")
}