From 911c777348326028e7bcaf0bfec042ce5f1f83bc Mon Sep 17 00:00:00 2001
From: yuetsh <517252939@qq.com>
Date: Sat, 30 Aug 2025 14:29:16 +0800
Subject: [PATCH] reset password

---
 account/urls/admin.py  |  3 ++-
 account/views/admin.py | 28 ++++++++++++++++++++++++++++
 2 files changed, 30 insertions(+), 1 deletion(-)

diff --git a/account/urls/admin.py b/account/urls/admin.py
index 7158432..7390b4a 100644
--- a/account/urls/admin.py
+++ b/account/urls/admin.py
@@ -1,8 +1,9 @@
 from django.urls import path
 
-from ..views.admin import UserAdminAPI, GenerateUserAPI
+from ..views.admin import UserAdminAPI, GenerateUserAPI, ResetUserPasswordAPI
 
 urlpatterns = [
     path("user", UserAdminAPI.as_view()),
     path("generate_user", GenerateUserAPI.as_view()),
+    path("reset_password", ResetUserPasswordAPI.as_view()),
 ]
diff --git a/account/views/admin.py b/account/views/admin.py
index 1b970bb..4b90e87 100644
--- a/account/views/admin.py
+++ b/account/views/admin.py
@@ -6,6 +6,7 @@ from django.db import transaction, IntegrityError
 from django.db.models import Q
 from django.http import HttpResponse
 from django.contrib.auth.hashers import make_password
+from django.utils.crypto import get_random_string
 
 from submission.models import Submission
 from utils.api import APIView, validate_serializer
@@ -239,3 +240,30 @@ class GenerateUserAPI(APIView):
             #    duplicate key value violates unique constraint "user_username_key"
             #    DETAIL:  Key (username)=(root11) already exists.
             return self.error(str(e).split("\n")[1])
+
+
+class ResetUserPasswordAPI(APIView):
+    @super_admin_required
+    def post(self, request):
+        """
+        重置用户密码为随机6位数字(不包括0)
+        """
+        data = request.data
+        user_id = data["id"]
+        
+        try:
+            user = User.objects.get(id=user_id)
+        except User.DoesNotExist:
+            return self.error("User does not exist")
+        
+        # 生成6位随机数字密码(不包括0)
+        new_password = get_random_string(6, allowed_chars="123456789")
+        
+        # 设置新密码
+        user.set_password(new_password)
+        user.save()
+        
+        return self.success({
+            "message": "Password reset successfully",
+            "new_password": new_password
+        }) 
\ No newline at end of file