fix: 改密计入锁定并清理过期管理员会话

2026-09-30 16:22:48 +08:00
parent b3787a0471
commit 1cb562fb71
4 changed files with 108 additions and 2 deletions
@@ -42,6 +42,9 @@ func (h *Handler) setAdminPasswordHash(ctx context.Context, phc string) error {
 func (h *Handler) createSession(ctx context.Context, hashHex string, ttl time.Duration) error {
 	now := time.Now()
 	return h.db.Queue.Do(ctx, func(tx *sql.Tx) error {
+		if _, err := tx.Exec(`DELETE FROM admin_sessions WHERE expires_at <= ?`, now.UnixMilli()); err != nil {
+			return err
+		}
 		_, err := tx.Exec(
 			`INSERT INTO admin_sessions(token_hash, created_at, expires_at) VALUES(?, ?, ?)`,
 			hashHex, now.UnixMilli(), now.Add(ttl).UnixMilli(),