feat: 安全性提升

This commit is contained in:
手瓜一十雪 2025-09-06 11:23:09 +08:00
parent 27af8e52ac
commit f4412bb086
3 changed files with 11 additions and 5 deletions

View File

@ -18,11 +18,17 @@ const CheckDefaultPassword = () => {
if (data) { if (data) {
dialog.confirm({ dialog.confirm({
title: '修改默认密码', title: '修改默认密码',
content: '检测到当前密码为默认密码,请尽快修改密码。', content: '检测到当前密码为默认密码,为了您的安全,必须立即修改密码。',
confirmText: '前往修改', confirmText: '前往修改',
onConfirm: () => { onConfirm: () => {
navigate('/config?tab=token') navigate('/config?tab=token')
} },
onCancel: () => {
navigate('/config?tab=token')
},
onClose() {
navigate('/config?tab=token')
},
}) })
} }
} }

View File

@ -10,7 +10,7 @@ import { isEmpty } from '@webapi/utils/check';
// 检查是否使用默认Token // 检查是否使用默认Token
export const CheckDefaultTokenHandler: RequestHandler = async (_, res) => { export const CheckDefaultTokenHandler: RequestHandler = async (_, res) => {
const webuiToken = await WebUiConfig.GetWebUIConfig(); const webuiToken = await WebUiConfig.GetWebUIConfig();
if (webuiToken.token === 'napcat') { if (webuiToken.token.startsWith('napcat')) {
return sendSuccess(res, true); return sendSuccess(res, true);
} }
return sendSuccess(res, false); return sendSuccess(res, false);

View File

@ -47,8 +47,8 @@ export const CreateTerminalHandler: RequestHandler = async (req, res) => {
if (isMacOS) { if (isMacOS) {
return sendError(res, 'MacOS不支持终端'); return sendError(res, 'MacOS不支持终端');
} }
if ((await WebUiConfig.GetWebUIConfig()).token === 'napcat') { if ((await WebUiConfig.GetWebUIConfig()).token.startsWith('napcat')) {
return sendError(res, '默认密码禁止创建终端'); return sendError(res, '密码禁止创建终端');
} }
try { try {
const { cols, rows } = req.body; const { cols, rows } = req.body;