fix: 限制管理接口请求体大小与读取时间

2026-09-30 16:22:48 +08:00
parent b40ef5c548
commit 1a4bf6f185
7 changed files with 170 additions and 8 deletions
@@ -35,7 +35,7 @@ func (h *Handler) handleLogin(w http.ResponseWriter, r *http.Request) {
 		Password string `json:"password"`
 	}
 	if err := httpx.DecodeJSON(r, &req); err != nil {
-		httpx.WriteError(w, http.StatusBadRequest, "bad_request", "请求体无效")
+		writeDecodeError(w, err)
 		return
 	}
 	if req.Username != adminUsername {
@@ -117,7 +117,7 @@ func (h *Handler) handlePassword(w http.ResponseWriter, r *http.Request) {
 	}
 	if err := httpx.DecodeJSON(r, &req); err != nil {
 		h.audit(actorString(p), "password_change", "", "bad_request", ip)
-		httpx.WriteError(w, http.StatusBadRequest, "bad_request", "请求体无效")
+		writeDecodeError(w, err)
 		return
 	}
 	if len(req.NewPassword) < minPasswordLen {