From b276654ac285686a8488203cb788bcf71f69bcb2 Mon Sep 17 00:00:00 2001
From: wkc <978997012@qq.com>
Date: Mon, 30 Mar 2026 10:47:58 +0800
Subject: [PATCH] =?UTF-8?q?=E6=8E=A5=E5=85=A5=E4=B8=AA=E4=BA=BA=E4=BF=AE?=
 =?UTF-8?q?=E6=94=B9=E5=AF=86=E7=A0=81=E5=8A=A0=E5=AF=86?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ruoyi-ui/src/api/system/user.js              |  5 +++--
 ruoyi-ui/tests/password-transfer-api.test.js | 13 +++++++++++++
 2 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/ruoyi-ui/src/api/system/user.js b/ruoyi-ui/src/api/system/user.js
index b5e3edd..69c8591 100644
--- a/ruoyi-ui/src/api/system/user.js
+++ b/ruoyi-ui/src/api/system/user.js
@@ -1,5 +1,6 @@
 import request from '@/utils/request'
 import { parseStrEmpty } from "@/utils/ruoyi";
+import { encryptPasswordFields } from '@/utils/passwordTransfer'
 
 // 查询用户列表
 export function listUser(query) {
@@ -89,10 +90,10 @@ export function updateUserProfile(data) {
 
 // 用户密码重置
 export function updateUserPwd(oldPassword, newPassword) {
-  const data = {
+  const data = encryptPasswordFields({
     oldPassword,
     newPassword
-  }
+  }, ['oldPassword', 'newPassword'], process.env.VUE_APP_PASSWORD_TRANSFER_KEY)
   return request({
     url: '/system/user/profile/updatePwd',
     method: 'put',
diff --git a/ruoyi-ui/tests/password-transfer-api.test.js b/ruoyi-ui/tests/password-transfer-api.test.js
index 97867fc..c8d0ce5 100644
--- a/ruoyi-ui/tests/password-transfer-api.test.js
+++ b/ruoyi-ui/tests/password-transfer-api.test.js
@@ -66,4 +66,17 @@ const registerConfig = loginModule.register({ username: 'u1', password: 'p1', co
 assert.notStrictEqual(registerConfig.data.password, 'p1')
 assert.strictEqual(registerConfig.data.confirmPassword, 'p1')
 
+const userModule = loadModule(
+  path.resolve(__dirname, '../src/api/system/user.js'),
+  {
+    request,
+    encryptPasswordFields,
+    parseStrEmpty: value => value
+  }
+)
+
+const updatePwdConfig = userModule.updateUserPwd('oldPwd', 'newPwd')
+assert.notStrictEqual(updatePwdConfig.data.oldPassword, 'oldPwd')
+assert.notStrictEqual(updatePwdConfig.data.newPassword, 'newPwd')
+
 console.log('password-transfer-api test passed')