加固后台管理安全

backend/internal/modules/adminmgr/service.go

@@ -3,9 +3,13 @@ package adminmgr
 import (
 	"context"
 	"errors"
+	"unicode"
 )
 
-var ErrDependencyUnavailable = errors.New("dependency unavailable")
+var (
+	ErrDependencyUnavailable = errors.New("dependency unavailable")
+	ErrWeakPassword          = errors.New("weak password")
+)
 
 type Service struct {
 	repo *Repository
@@ -39,8 +43,8 @@ func (s *Service) Create(ctx context.Context, req CreateAdminRequest) (*AdminUse
 	if s.repo == nil {
 		return nil, ErrDependencyUnavailable
 	}
-	if len(req.Password) < 6 {
-		return nil, errors.New("password too short")
+	if !passwordStrongEnough(req.Password) {
+		return nil, ErrWeakPassword
 	}
 	return s.repo.Create(ctx, req)
 }
@@ -66,12 +70,39 @@ func (s *Service) AssignRoles(ctx context.Context, adminID uint64, req AssignRol
 	return s.repo.AssignRoles(ctx, adminID, req.RoleIDs)
 }
 
-func (s *Service) ChangePassword(ctx context.Context, id uint64, req ChangePasswordRequest) error {
+func (s *Service) ChangeOwnPassword(ctx context.Context, adminID uint64, req ChangePasswordRequest) error {
 	if s.repo == nil {
 		return ErrDependencyUnavailable
 	}
-	if len(req.NewPassword) < 6 {
-		return errors.New("new password too short")
+	if !passwordStrongEnough(req.NewPassword) {
+		return ErrWeakPassword
 	}
-	return s.repo.ChangePassword(ctx, id, req.OldPassword, req.NewPassword)
+	return s.repo.ChangeOwnPassword(ctx, adminID, req.OldPassword, req.NewPassword)
+}
+
+func (s *Service) ResetPassword(ctx context.Context, id uint64, req ResetPasswordRequest) error {
+	if s.repo == nil {
+		return ErrDependencyUnavailable
+	}
+	if !passwordStrongEnough(req.NewPassword) {
+		return ErrWeakPassword
+	}
+	return s.repo.ResetPassword(ctx, id, req.NewPassword)
+}
+
+func passwordStrongEnough(value string) bool {
+	if len([]rune(value)) < 8 {
+		return false
+	}
+	hasLetter := false
+	hasDigit := false
+	for _, r := range value {
+		if unicode.IsLetter(r) {
+			hasLetter = true
+		}
+		if unicode.IsDigit(r) {
+			hasDigit = true
+		}
+	}
+	return hasLetter && hasDigit
 }