加固后台管理安全

scripts/load_stress.go

@@ -8,6 +8,7 @@ import (
 	"io"
 	"math/rand"
 	"net/http"
+	"os"
 	"sort"
 	"sync"
 	"sync/atomic"
@@ -266,12 +267,19 @@ func initAdminToken(baseURL string) *AdminToken {
 		return nil
 	}
 
-	// 登录（使用默认管理员账号，验证码留空mock会通过）
+	adminUsername := os.Getenv("LOAD_STRESS_ADMIN_USERNAME")
+	adminPassword := os.Getenv("LOAD_STRESS_ADMIN_PASSWORD")
+	if adminUsername == "" || adminPassword == "" {
+		fmt.Println("   跳过后台登录：请设置 LOAD_STRESS_ADMIN_USERNAME 和 LOAD_STRESS_ADMIN_PASSWORD")
+		return nil
+	}
+
+	// 登录后台账号
 	loginPayload := map[string]string{
-		"username":   "admin",
-		"password":   "admin123456",
-		"captcha_id": captchaResp.Data.CaptchaID,
-		"captcha":    "1234", // mock模式会自动通过
+		"username":     adminUsername,
+		"password":     adminPassword,
+		"captcha_id":   captchaResp.Data.CaptchaID,
+		"captcha_code": "1234",
 	}
 	loginBody, _ := json.Marshal(loginPayload)
 
@@ -434,11 +442,11 @@ func runGradualTest(config TestConfig, authPool *AuthPool, adminToken *AdminToke
 		Duration    time.Duration
 		Concurrency int
 	}{
-		{30 * time.Second, 10},                           // 预热
-		{60 * time.Second, config.Concurrency / 4},       // 25%负载
-		{60 * time.Second, config.Concurrency / 2},       // 50%负载
-		{60 * time.Second, config.Concurrency},           // 100%负载
-		{30 * time.Second, config.Concurrency * 2},       // 峰值负载
+		{30 * time.Second, 10},                     // 预热
+		{60 * time.Second, config.Concurrency / 4}, // 25%负载
+		{60 * time.Second, config.Concurrency / 2}, // 50%负载
+		{60 * time.Second, config.Concurrency},     // 100%负载
+		{30 * time.Second, config.Concurrency * 2}, // 峰值负载
 	}
 
 	result := &TestResult{