Upload router_users.py

router_users.py

@@ -261,21 +261,25 @@ async def update_user_profile(account: str, update_data: UserUpdate):
     db.save_data("users.json", users_db)
     return {"status": "success", "data": {k: v for k, v in user.items() if k != "password"}}
 
-@router.post("/api/users/{account}/reset-password")
-async def reset_password(account: str, pwd_data: PasswordReset):
+@router.post("/api/users/reset_password")
+async def reset_password(pwd_data: PasswordReset):
+    # 1. 直接从请求体中提取账号，不需要通过 URL 传参
+    account = pwd_data.account
+    
     users_db = db.load_data("users.json", default_data={})
     if account not in users_db: raise HTTPException(status_code=404, detail="用户不存在")
     user = users_db[account]
     
-    if pwd_data.verify_type == "email" and user.get("email") != pwd_data.verify_contact:
+    # 🚀 核心排雷：严格匹配 models.py 中的驼峰命名 verifyType 和 verifyContact
+    if pwd_data.verifyType == "email" and user.get("email") != pwd_data.verifyContact:
         raise HTTPException(status_code=400, detail="填写的邮箱与该账号绑定的邮箱不匹配")
-    if pwd_data.verify_type == "phone" and user.get("phone") != pwd_data.verify_contact:
+    if pwd_data.verifyType == "phone" and user.get("phone") != pwd_data.verifyContact:
         raise HTTPException(status_code=400, detail="填写的手机号与该账号绑定的手机号不匹配")
 
-    cache_key = f"{pwd_data.verify_contact}_reset"
+    cache_key = f"{pwd_data.verifyContact}_reset"
     cached = VERIFY_CODES.get(cache_key)
     
-    # 这里同样加上安全获取策略防崩
+    # 安全获取过期时间防崩
     expire_time = cached.get("expires_at", cached.get("expires", 0)) if cached else 0
     if not cached or cached["code"] != pwd_data.code or time.time() > expire_time:
         raise HTTPException(status_code=400, detail="验证码不正确或已过期")
@@ -286,7 +290,8 @@ async def reset_password(account: str, pwd_data: PasswordReset):
     VERIFY_CODES.pop(cache_key, None)
     user["password"] = pwd_data.new_password
     db.save_data("users.json", users_db)
-    return {"status": "success"}
+    
+    return {"status": "success", "message": "密码修改成功"}
 
 @router.post("/api/users/follow")
 async def toggle_follow(follow: FollowToggle):