fix: 修复强制重置密码流程与表单状态

- 修正强制改密跳转及免旧密码的服务端校验

- 统一双端表单错误布局与更新按钮加载状态

- 补充认证服务和强制改密路由测试

easyflow-api/easyflow-api-usercenter/src/main/java/tech/easyflow/usercenter/controller/system/UcSysAccountController.java

@@ -1,6 +1,6 @@
 package tech.easyflow.usercenter.controller.system;
 
-import cn.hutool.crypto.digest.BCrypt;
+import cn.dev33.satoken.stp.StpUtil;
 import com.alibaba.fastjson2.JSONObject;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PostMapping;
@@ -8,13 +8,13 @@ import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 import tech.easyflow.auth.entity.EncryptedCredentialDTO;
 import tech.easyflow.auth.service.AuthCredentialKeyService;
+import tech.easyflow.auth.service.AuthService;
 import tech.easyflow.common.domain.Result;
 import tech.easyflow.common.entity.LoginAccount;
 import tech.easyflow.common.satoken.util.SaTokenUtil;
 import tech.easyflow.common.web.jsonbody.JsonBody;
 import tech.easyflow.system.entity.SysAccount;
 import tech.easyflow.system.service.SysAccountService;
-import tech.easyflow.system.util.SysPasswordPolicy;
 
 import javax.annotation.Resource;
 import java.math.BigInteger;
@@ -34,6 +34,8 @@ public class UcSysAccountController {
     private SysAccountService service;
     @Resource
     private AuthCredentialKeyService credentialKeyService;
+    @Resource
+    private AuthService authService;
 
     /**
      * 获取用户的信息
@@ -66,7 +68,8 @@ public class UcSysAccountController {
     /**
      * 修改密码
      *
-     * @param encryptedCredential 加密后的旧密码、新密码与确认密码
+     * @param encryptedCredential 加密后的当前密码、新密码与确认密码
+     * @return 密码修改结果
      */
     @PostMapping("/updatePassword")
     public Result<Void> updatePassword(@JsonBody EncryptedCredentialDTO encryptedCredential) {
@@ -75,25 +78,13 @@ public class UcSysAccountController {
         String newPassword = payload.getString("newPassword");
         String confirmPassword = payload.getString("confirmPassword");
         BigInteger loginAccountId = SaTokenUtil.getLoginAccount().getId();
-        SysAccount record = service.getById(loginAccountId);
-        if (record == null) {
-            return Result.fail("修改失败");
-        }
-        String pwdDb = record.getPassword();
-        if (!BCrypt.checkpw(password, pwdDb)) {
-            return Result.fail(1, "密码不正确");
-        }
-        if (!newPassword.equals(confirmPassword)) {
-            return Result.fail(2, "两次密码不一致");
-        }
-        SysPasswordPolicy.validateStrongPassword(newPassword);
-        SysAccount update = new SysAccount();
-        update.setId(loginAccountId);
-        update.setPassword(BCrypt.hashpw(newPassword));
-        update.setPasswordResetRequired(false);
-        update.setModified(new Date());
-        update.setModifiedBy(loginAccountId);
-        service.updateById(update);
+        authService.updateOwnPassword(
+                loginAccountId,
+                password,
+                newPassword,
+                confirmPassword,
+                StpUtil.getLoginDevice()
+        );
         return Result.ok();
     }
 }