From b8720f413d121005169938cc8abb2920503e6a1a Mon Sep 17 00:00:00 2001
From: kevin <kevin@lmve.net>
Date: Fri, 10 Jul 2026 13:11:46 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20=E8=87=AA=E5=8A=A9=E4=BF=AE=E6=94=B9?=
 =?UTF-8?q?=E5=AF=86=E7=A0=81=E5=90=8E=E6=96=AD=E5=BC=80=20VPN=20=E8=BF=9E?=
 =?UTF-8?q?=E6=8E=A5=E5=B9=B6=E7=99=BB=E5=87=BA=E6=89=80=E6=9C=89=20Web=20?=
 =?UTF-8?q?=E4=BC=9A=E8=AF=9D?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- auth.go: ChangePassword 失效所有会话（不再排除当前会话），调用 KickUser 断开 VPN 隧道
- ProfileView.vue: 改密成功后 logout 清除 token，跳转登录页并携带 msg 参数
- LoginView.vue: 读取 query.msg 显示"密码已修改，请重新登录"绿色提示
- zh.ts/en.ts: 新增 login.passwordChanged 国际化 key
---
 frontend/src/locales/en.ts         | 1 +
 frontend/src/locales/zh.ts         | 1 +
 frontend/src/views/LoginView.vue   | 5 ++++-
 frontend/src/views/ProfileView.vue | 4 ++++
 internal/handler/auth.go           | 8 ++++++--
 5 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/frontend/src/locales/en.ts b/frontend/src/locales/en.ts
index e11cd79..d6ccafb 100644
--- a/frontend/src/locales/en.ts
+++ b/frontend/src/locales/en.ts
@@ -45,6 +45,7 @@ export default {
     loginFailed: 'Login failed',
     loggingIn: 'Logging in...',
     loginButton: 'Login',
+    passwordChanged: 'Password changed, please log in again',
   },
   profile: {
     title: 'Profile',
diff --git a/frontend/src/locales/zh.ts b/frontend/src/locales/zh.ts
index d281c58..1a3c808 100644
--- a/frontend/src/locales/zh.ts
+++ b/frontend/src/locales/zh.ts
@@ -45,6 +45,7 @@ export default {
     loginFailed: '登录失败',
     loggingIn: '登录中...',
     loginButton: '登录',
+    passwordChanged: '密码已修改，请重新登录',
   },
   profile: {
     title: '用户信息',
diff --git a/frontend/src/views/LoginView.vue b/frontend/src/views/LoginView.vue
index 6ba9e4f..df1545a 100644
--- a/frontend/src/views/LoginView.vue
+++ b/frontend/src/views/LoginView.vue
@@ -1,16 +1,18 @@
 <script setup lang="ts">
 import { ref } from 'vue'
-import { useRouter } from 'vue-router'
+import { useRouter, useRoute } from 'vue-router'
 import { useI18n } from 'vue-i18n'
 import { useAuthStore } from '@/stores/auth'
 
 const router = useRouter()
+const route = useRoute()
 const authStore = useAuthStore()
 const { t } = useI18n()
 
 const username = ref('')
 const password = ref('')
 const error = ref('')
+const successMsg = ref(route.query.msg === 'password_changed' ? t('login.passwordChanged') : '')
 const loading = ref(false)
 
 async function handleLogin() {
@@ -71,6 +73,7 @@ async function handleLogin() {
           />
         </div>
         <p v-if="error" class="text-sm text-red-500">{{ error }}</p>
+        <p v-if="successMsg" class="text-sm text-green-500">{{ successMsg }}</p>
         <button
           type="submit"
           :disabled="loading"
diff --git a/frontend/src/views/ProfileView.vue b/frontend/src/views/ProfileView.vue
index e6f8771..3269821 100644
--- a/frontend/src/views/ProfileView.vue
+++ b/frontend/src/views/ProfileView.vue
@@ -1,9 +1,11 @@
 <script setup lang="ts">
 import { onMounted, ref } from 'vue'
+import { useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
 import { useAuthStore } from '@/stores/auth'
 
 const authStore = useAuthStore()
+const router = useRouter()
 const { t } = useI18n()
 
 onMounted(async () => {
@@ -49,6 +51,8 @@ async function handleChangePassword() {
       throw new Error(data.error || t('profile.passwordChangeFailed'))
     }
     showPasswordModal.value = false
+    authStore.logout()
+    router.push({ name: 'login', query: { msg: 'password_changed' } })
   } catch (e: any) {
     passwordError.value = e.message || t('profile.passwordChangeFailed')
   } finally {
diff --git a/internal/handler/auth.go b/internal/handler/auth.go
index 12e3bfa..ca46312 100644
--- a/internal/handler/auth.go
+++ b/internal/handler/auth.go
@@ -8,6 +8,7 @@ import (
 	"lmvpn/internal/db"
 	"lmvpn/internal/middleware"
 	"lmvpn/internal/model"
+	"lmvpn/internal/vpn"
 
 	"github.com/gin-gonic/gin"
 	"github.com/google/uuid"
@@ -143,8 +144,11 @@ func ChangePassword(c *gin.Context) {
 		return
 	}
 
-	sessionID, _ := c.Get("session_id")
-	db.DB.Model(&model.Session{}).Where("user_id = ? AND session_id != ?", userID, sessionID).Update("invalid", true)
+	db.DB.Model(&model.Session{}).Where("user_id = ?", userID).Update("invalid", true)
+
+	if vpn.VPN != nil && vpn.VPN.Running() {
+		vpn.VPN.KickUser(user.ID)
+	}
 
 	c.JSON(http.StatusOK, gin.H{"message": "密码修改成功"})
 }