From 2914eea299ec5a1d6bfdf40b2743226ef9cbc5af Mon Sep 17 00:00:00 2001
From: 刘帅 <rr.iii@qq.com>
Date: 星期一, 28 九月 2026 11:43:04 +0800
Subject: [PATCH] 脱敏接口调整及返回数据调整

---
 cloud-server-other/src/main/java/com/dsh/other/controller/SiteController.java |    9 +++++++++
 1 files changed, 9 insertions(+), 0 deletions(-)

diff --git a/cloud-server-other/src/main/java/com/dsh/other/controller/SiteController.java b/cloud-server-other/src/main/java/com/dsh/other/controller/SiteController.java
index ea11d6e..25dc2c6 100644
--- a/cloud-server-other/src/main/java/com/dsh/other/controller/SiteController.java
+++ b/cloud-server-other/src/main/java/com/dsh/other/controller/SiteController.java
@@ -677,9 +677,18 @@
     })
     public ResultUtil<Map<String, Object>> queryMySiteById(Integer id) {
         try {
+            Integer uid = tokenUtil.getUserIdFormRedis();
+            if (uid == null) {
+                return ResultUtil.tokenErr();
+            }
             HashMap<String, Object> map = new HashMap<>();
             System.err.println("预约id"+id);
             SiteBooking siteBooking = siteBookingService.getById(id);
+            // This endpoint now returns the original contact data to the APP,
+            // so an authenticated user may only read their own booking.
+            if (siteBooking == null || !uid.equals(siteBooking.getAppUserId())) {
+                return ResultUtil.error("预约记录不存在");
+            }
             Integer targetAudience = siteBooking.getTargetAudience();
             System.err.println("预约"+siteBooking);
             Integer storeId = siteBooking.getStoreId();

--
Gitblit v1.7.1