fix: 统一对话密码锁键为发送方加对方不含 IP

internal/app/message/submit_test.go

@@ -4,6 +4,7 @@ import (
 	"context"
 	"database/sql"
 	"errors"
+	"fmt"
 	"math"
 	"path/filepath"
 	"testing"
@@ -519,3 +520,44 @@ WHERE m.id='late-1' AND d.endpoint_id='bob'`).Scan(&bobN); err != nil {
 		}
 	})
 }
+
+func TestU03SubmitTalkLockNoIP(t *testing.T) {
+	t.Parallel()
+	lim := defaultTestLimits()
+	dir := t.TempDir()
+	db, err := store.Open(filepath.Join(dir, "data"), "FULL")
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() { _ = db.Close() })
+	fixed := time.UnixMilli(1_700_000_000_000)
+	locks := auth.NewLoginLocks()
+	locks.SetClock(func() time.Time { return fixed })
+	app := New(db, lim, auth.NewStubHashPool(),
+		WithNow(func() time.Time { return fixed }),
+		WithLocks(locks),
+	)
+	insertEndpoint(t, db, "alice", "", 1, 0)
+	insertEndpoint(t, db, "bob", "secret", 1, 0)
+	ctx := context.Background()
+
+	for i := 0; i < 10; i++ {
+		bad := baseSend(fmt.Sprintf("w%d", i), "bob")
+		bad.TalkPassword = "wrong"
+		_, err := app.Submit(ctx, "alice", port.ConnInfo{RemoteIP: fmt.Sprintf("10.0.0.%d", i+1)}, bad)
+		if protoCode(err) != protocol.CodeTalkPasswordInvalid {
+			t.Fatalf("i=%d got %v", i, err)
+		}
+	}
+	empty := baseSend("empty", "bob")
+	_, err = app.Submit(ctx, "alice", port.ConnInfo{RemoteIP: "8.8.8.8"}, empty)
+	if protoCode(err) != protocol.CodeTalkPasswordRequired {
+		t.Fatalf("empty while locked want required got %v", err)
+	}
+	okReq := baseSend("ok1", "bob")
+	okReq.TalkPassword = "secret"
+	_, err = app.Submit(ctx, "alice", port.ConnInfo{RemoteIP: "9.9.9.9"}, okReq)
+	if protoCode(err) != protocol.CodeRateLimited {
+		t.Fatalf("correct password while locked want rate_limited got %v", err)
+	}
+}