user account manage: update password when not set password

app/services/users/update_password_service.rb

@@ -11,7 +11,7 @@ class Users::UpdatePasswordService < ApplicationService
   def call
     Users::UpdatePasswordForm.new(params).validate!
 
-    raise Error, '旧密码不匹配' unless user.check_password?(params[:old_password])
+    raise Error, '旧密码不匹配' unless user.check_password?(params[:old_password]) || user.hashed_password.blank?
 
     ActiveRecord::Base.transaction do
       user.update!(password: params[:password])

app/views/users/accounts/show.json.jbuilder

@@ -25,3 +25,5 @@ json.department_name extension&.department&.name
 
 json.base_info_completed user.profile_completed?
 json.all_certified user.all_certified?
+
+json.has_password user.hashed_password.present?