fix(auth): enforce password and agent role boundaries

2026-07-21 23:41:18 +08:00
parent fb15c64d9b
commit 457d2cc9e5
7 changed files with 135 additions and 19 deletions
--- a/routes/api/v1/player.php
+++ b/routes/api/v1/player.php
@@ -24,7 +24,9 @@ Route::middleware('lottery.player')->group(function (): void {
        ->name('api.v1.player.')
        ->group(function (): void {
            Route::get('me', MeController::class)->name('me');
-            Route::put('password', PlayerPasswordUpdateController::class)->name('password.update');
+            Route::put('password', PlayerPasswordUpdateController::class)
+                ->middleware('throttle:player-password-change')
+                ->name('password.update');
        });

    // 钱包