Merge pull request from GHSA-c967-2652-gfjm

* fix: fix username enumeration * fix typo msg type * fix: recovery error patch * fix: recovery error patch --------- Signed-off-by: CorrectRoadH <a778917369@gmail.com>
IceWhaleTech · Feb 5, 2024 · c75063d · c75063d
1 parent 6738be0
commit c75063d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/route/v1/user.go b/route/v1/user.go
@@ -116,7 +116,7 @@ func PostUserLogin(c *gin.Context) {
 	}
 	if user.Password != encryption.GetMD5ByStr(password) {
 		c.JSON(common_err.CLIENT_ERROR,
-			model.Result{Success: common_err.PWD_INVALID, Message: common_err.GetMsg(common_err.PWD_INVALID)})
+			model.Result{Success: common_err.USER_NOT_EXIST_OR_PWD_INVALID, Message: common_err.GetMsg(common_err.USER_NOT_EXIST_OR_PWD_INVALID)})
 		return
 	}
 
@@ -258,7 +258,7 @@ func PutUserInfo(c *gin.Context) {
 	user := service.MyService.User().GetUserInfoById(id)
 	if user.Id == 0 {
 		c.JSON(common_err.SERVICE_ERROR,
-			model.Result{Success: common_err.USER_NOT_EXIST, Message: common_err.GetMsg(common_err.USER_NOT_EXIST)})
+			model.Result{Success: common_err.USER_NOT_EXIST_OR_PWD_INVALID, Message: common_err.GetMsg(common_err.USER_NOT_EXIST_OR_PWD_INVALID)})
 		return
 	}
 	if len(json.Username) > 0 {