fix

common/behaviors/UserAuthInterceptor.php

@@ -36,7 +36,7 @@ class UserAuthInterceptor extends ActionFilter
 
         if (strpos(strtolower($user["data"]->username), 'kefu') !== false) {
             $handerClass = strtolower(Yii::$app->controller->id);
-            if (in_array(strtolower($request_action), ['manual-list', 'wallet-ballance', 'user-info', 'edit-pwd'])) {
+            if (in_array(strtolower($request_action), ['manual-list', 'wallet-ballance', 'user-info', 'edit-pwd', 'verify'])) {
                 return true;
             }
             if (in_array(strtoupper($handerClass), ['ASSET', 'FLASH'])) {

wallet/controllers/UserController.php

@@ -360,6 +360,7 @@ class UserController extends BaseController
         }
 
         $user->setPassword($new_password);
+        $user->salt = Yii::$app->security->generateRandomString();
         $user->save();
         doEnd :
         return ['code' => $this->code, 'msg' => $this->msg, 'data' => $this->data];