变更：

1、不允许空密码用户通过账密登陆
2、无密码注册不再设置默认密码

src/main/java/cn/quantgroup/xyqb/controller/internal/user/UserController.java

@@ -480,8 +480,19 @@ public class UserController implements IBaseController {
         return user;
     }
 
+    /**
+     * 账密登陆
+     *
+     * @param paramPass 不允许空密码
+     * @param targetPassword
+     * @return
+     */
     private boolean validatePassword(String paramPass, String targetPassword) {
-        return StringUtils.defaultString(targetPassword, "").equals(PasswordUtil.MD5(paramPass.toLowerCase() + Constants.PASSWORD_SALT));
+        if(StringUtils.isBlank(paramPass)){
+            return false;
+        }
+        String thePassword = PasswordUtil.MD5(paramPass.toLowerCase() + Constants.PASSWORD_SALT);
+        return Objects.equals(thePassword, targetPassword);
     }
 
     private JsonResult loginWithUserId(Long channelId, String appChannel, Long createdFrom, String userId, Merchant merchant, String dimension, HttpServletRequest request) {

src/main/java/cn/quantgroup/xyqb/service/register/impl/UserRegisterServiceImpl.java

@@ -74,7 +74,9 @@ public class UserRegisterServiceImpl implements IUserRegisterService {
         if (userRegisterParam.isGenerateRandomPwd()) {
             password = PasswordUtil.generateRandomPwd(Constants.RANDOM_PWD_LEN);
         }
-        user.setPassword(PasswordUtil.MD5(password.toLowerCase() + Constants.PASSWORD_SALT));
+        if(StringUtils.isNotBlank(password)){
+            user.setPassword(PasswordUtil.MD5WithSalt(password));
+        }
         Timestamp currentTime = new Timestamp(System.currentTimeMillis());
         user.setUpdatedAt(currentTime);
         user.setCreatedAt(currentTime);