fix: 阻止将管理员口令置空

2024-03-29 14:24:51 +08:00
parent 2b3c5242df
commit 7b37269dfb
1 changed files with 4 additions and 0 deletions
@@ -49,6 +49,10 @@ async def get_config():

@admin_api.patch('/config/update', dependencies=[Depends(admin_required)])
 async def update_config(data: dict):
+    admin_token = data.get('admin_token')
+    if admin_token is None or admin_token == '':
+        return APIResponse(code=400, detail='管理员密码不能为空')
+
    for k, v in data.items():
        settings.__setattr__(k, v)
    return APIResponse()