修改用户密码加密

hapi-think/lib/index.js

@@ -392,6 +392,10 @@ exports.plugin  = {
           const {email,headImgUrl,mobile,password,oldPassword,checkPassword} = data["$set"];
           if(params.type === "password"){
             
+            //获取用户原密码
+            const passwordKey = userType.token.split('ndcl')[1];
+            user.password = await Iron.unseal(user.password, passwordKey, Iron.defaults);
+
             if(oldPassword !== user.password){
               Error("原密码输入错误！");
             }
@@ -412,7 +416,7 @@ exports.plugin  = {
               Error("当前密码与旧密码不能一致！");
             }
 
-            await mongo.db.collection('user').updateOne({_id:user._id},{$set:{password}});
+            await mongo.db.collection('user').updateOne({_id:user._id},{$set:{password:await Iron.seal(password, passwordKey, Iron.defaults)}});
 
           }else{