timeout

@@ -287,7 +287,7 @@ const verifyCodeByMobileAPI = (req, res, next) => {
     service.validateMobileCodeAsync(phoneNum, code, areaCode)
     service.validateMobileCodeAsync(phoneNum, code, areaCode)
         .then(result => {
         .then(result => {
             if (result.code === 200 && result.data) {
             if (result.code === 200 && result.data) {
-                res.session.backcode = {
+                req.session.backcode = {
                     phoneNum: phoneNum,
                     phoneNum: phoneNum,
                     token: result.data.token,
                     token: result.data.token,
                     areaCode: areaCode,
                     areaCode: areaCode,
@@ -312,14 +312,14 @@ const verifyCodeByMobileAPI = (req, res, next) => {
  * 找回密码页面，设置新密码页面-手机
  * 找回密码页面，设置新密码页面-手机
  */
  */
 const setNewPasswordByMobilePage = (req, res) => {
 const setNewPasswordByMobilePage = (req, res) => {
-    let backcode = res.session.backcode;
+    let backcode = req.session.backcode;
 
 
     if (!backcode || !(backcode.code || (backcode.token && helpers.verifyMobile(backcode.phoneNum)))) {
     if (!backcode || !(backcode.code || (backcode.token && helpers.verifyMobile(backcode.phoneNum)))) {
         res.redirect(400);
         res.redirect(400);
         return;
         return;
     }
     }
 
 
-    res.session.backcode = null;
+    req.session.backcode = null;
 
 
     res.render('back/new-password', Object.assign({
     res.render('back/new-password', Object.assign({
         module: 'passport',
         module: 'passport',

@@ -61,6 +61,7 @@ exports.validate = (req, res, next) => {
         return res.json({
         return res.json({
             code: 400,
             code: 400,
             message: '验证码超时，请重试',
             message: '验证码超时，请重试',
+            changeCaptcha: true,
             captchaShow: true
             captchaShow: true
         });
         });
     }
     }