fix: 统一对话密码锁键为发送方加对方不含 IP

internal/admin/endpoints.go

@@ -581,6 +581,29 @@ func (h *Handler) handleEndpointTalkPassword(w http.ResponseWriter, r *http.Requ
 		return
 	}
 
+	if h.identity != nil {
+		err := h.identity.SelfSetTalkPassword(r.Context(), id, req.TalkPassword)
+		if err != nil {
+			if isEndpointNotFound(err) {
+				h.auditP(p, "endpoint_talk_password", id, "not_found", ip)
+				httpx.WriteError(w, http.StatusNotFound, "not_found", "端不存在")
+				return
+			}
+			var pe *protocol.Error
+			if errors.As(err, &pe) && pe.Code == protocol.CodeBadRequest {
+				h.auditP(p, "endpoint_talk_password", id, "bad_request", ip)
+				httpx.WriteError(w, http.StatusBadRequest, "bad_request", "对话密码不合法")
+				return
+			}
+			h.auditP(p, "endpoint_talk_password", id, "error", ip)
+			httpx.WriteError(w, http.StatusInternalServerError, "internal", "内部错误")
+			return
+		}
+		h.auditP(p, "endpoint_talk_password", id, "ok", ip)
+		httpx.WriteOK(w, map[string]any{"talk_password_set": req.TalkPassword != ""})
+		return
+	}
+
 	var talkHash sql.NullString
 	if req.TalkPassword != "" {
 		th, err := h.hash.Hash(r.Context(), auth.PasswordTalk, req.TalkPassword)
@@ -602,6 +625,7 @@ func (h *Handler) handleEndpointTalkPassword(w http.ResponseWriter, r *http.Requ
 		httpx.WriteError(w, http.StatusNotFound, "not_found", "端不存在")
 		return
 	}
+	h.locks.Clear(auth.LockKey{Kind: auth.LockTalkTarget, EndpointID: id})
 	h.auditP(p, "endpoint_talk_password", id, "ok", ip)
 	httpx.WriteOK(w, map[string]any{"talk_password_set": talkHash.Valid})
 }