update：完成密码找回功能

main/manager-api/src/main/java/xiaozhi/modules/security/config/ShiroConfig.java

@@ -84,6 +84,7 @@ public class ShiroConfig {
         filterMap.put("/user/login", "anon");
         filterMap.put("/user/pub-config", "anon");
         filterMap.put("/user/register", "anon");
+        filterMap.put("/user/retrieve-password", "anon");
         // 将config路径使用server服务过滤器
         filterMap.put("/config/**", "server");
         filterMap.put("/agent/chat-history/report", "server");

main/manager-api/src/main/java/xiaozhi/modules/security/controller/LoginController.java

@@ -174,19 +174,19 @@ public class LoginController {
         // 验证用户是否是手机号码
         boolean validPhone = ValidatorUtils.isValidPhone(dto.getPhone());
         if (!validPhone) {
-            throw new RenException("用户名不是手机号码，无法提供找回密码服务");
+            throw new RenException("输入的手机号码格式不正确");
         }
 
         // 按照用户名获取用户
         SysUserDTO userDTO = sysUserService.getByUsername(dto.getPhone());
         if (userDTO == null) {
-            throw new RenException("用户名或验证码错误");
+            throw new RenException("输入的手机号码未注册");
         }
         // 验证短信验证码是否正常
         boolean validate = captchaService.validateSMSValidateCode(dto.getPhone(), dto.getCode(), false);
         // 判断是否通过验证
         if (!validate) {
-            throw new RenException("用户名或验证码错误");
+            throw new RenException("输入的手机验证码错误");
         }
 
         sysUserService.changePasswordDirectly(userDTO.getId(), dto.getPassword());

main/manager-api/src/main/java/xiaozhi/modules/security/service/impl/CaptchaServiceImpl.java

@@ -119,7 +119,7 @@ public class CaptchaServiceImpl implements CaptchaService {
 
         // 更新今日发送次数
         if (todayCount == 0) {
-            redisUtils.increment(todayCountKey,RedisUtils.DEFAULT_EXPIRE);
+            redisUtils.increment(todayCountKey, RedisUtils.DEFAULT_EXPIRE);
         } else {
             redisUtils.increment(todayCountKey);
         }

main/manager-api/src/main/java/xiaozhi/modules/sys/service/impl/SysUserServiceImpl.java

@@ -133,6 +133,10 @@ public class SysUserServiceImpl extends BaseServiceImpl<SysUserDao, SysUserEntit
     @Override
     @Transactional(rollbackFor = Exception.class)
     public void changePasswordDirectly(Long userId, String password) {
+        // 新密码强度
+        if (!isStrongPassword(password)) {
+            throw new RenException(ErrorCode.PASSWORD_WEAK_ERROR);
+        }
         SysUserEntity sysUserEntity = new SysUserEntity();
         sysUserEntity.setId(userId);
         sysUserEntity.setPassword(PasswordUtils.encode(password));