Round6: 前台图片缩略图+下载/视频修复; 后台连接测试单次+自动消失; 导航重组; 存储中文化; 自动化去掉创建按钮; 短信验证码(注册/重置/充值通知)

backend/python/app/api/profile.py

@@ -9,10 +9,11 @@ from datetime import datetime, date
 from ..database import get_db
 from ..models import (
     User, LoginLog, ApiKey, MembershipSubscription, AppPurchase, MarketApp,
-    gen_uuid
+    SmsConfig, gen_uuid
 )
 from ..auth import get_current_user, hash_password, verify_password
 from ..middleware.log_service import LogService
+from ..sms_client import send_sms_text
 
 router = APIRouter()
 
@@ -145,6 +146,15 @@ def update_password(
     db_user.password_hash = hash_password(req.new_password)
     db_user.updated_at = datetime.now()
 
+    # 密码修改成功后发送短信通知（若已配置短信且用户绑定手机号）
+    try:
+        sms_cfg = db.query(SmsConfig).first()
+        if sms_cfg and sms_cfg.provider and db_user.phone:
+            send_sms_text(sms_cfg, db_user.phone, "您的登录密码已修改，如非本人操作请尽快联系客服。")
+    except Exception as sms_err:
+        import logging
+        logging.getLogger("aiflow").warning(f"密码修改短信通知失败(不影响修改结果): {sms_err}")
+
     LogService.log_operation(
         user_id=db_user.id, username=db_user.username, action="change_password",
         target="user", target_id=db_user.id,