ext/new-api
2
0
Fork 0
mirror of https://github.com/QuantumNous/new-api.git synced 2026-09-11 14:41:21 +00:00
Code Activity

feat(auth): make password encryption opt-in #6743

Browse Source
This commit is contained in:
CaIon
2026-08-29 20:54:07 +08:00
parent 8454082f93
commit 918427d8ab
9 changed files with 46 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
controller/user.go
+10 -1
View File
@@ -40,12 +40,17 @@ var (
)
func GetPasswordEncryptionKey(c *gin.Context) {
if !common.PasswordLoginEncryptionEnabled {
common.ApiSuccess(c, gin.H{"enabled": false})
return
}
keyID, publicKey := common.PasswordEncryptionPublicKey()
if keyID == "" || publicKey == "" {
common.ApiErrorI18n(c, i18n.MsgDatabaseError)
return
}
common.ApiSuccess(c, gin.H{
"enabled": true,
"kid": keyID,
"public_key": publicKey,
})
@@ -64,7 +69,11 @@ func Login(c *gin.Context) {
}
username := loginRequest.Username
password := loginRequest.Password
if loginRequest.PasswordEncrypted != "" {
if common.PasswordLoginEncryptionEnabled {
if loginRequest.PasswordEncrypted == "" || loginRequest.EncryptionKeyID == "" {
common.ApiErrorI18n(c, i18n.MsgInvalidParams)
return
}
password, err = common.DecryptPassword(loginRequest.PasswordEncrypted, loginRequest.EncryptionKeyID)
if err != nil {
common.ApiErrorI18n(c, i18n.MsgUserUsernameOrPasswordError)