From a0e03b646f2c444b0f09687d24e9995112b99017 Mon Sep 17 00:00:00 2001
From: puzhibing <393733352@qq.com>
Date: 星期六, 10 十月 2026 17:30:11 +0800
Subject: [PATCH] 修改bug
---
ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/service/impl/TVinChargingOrderServiceImpl.java | 8 +++++---
1 files changed, 5 insertions(+), 3 deletions(-)
diff --git a/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/service/impl/TVinChargingOrderServiceImpl.java b/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/service/impl/TVinChargingOrderServiceImpl.java
index 800454b..a1d3852 100644
--- a/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/service/impl/TVinChargingOrderServiceImpl.java
+++ b/ruoyi-service/ruoyi-order/src/main/java/com/ruoyi/order/service/impl/TVinChargingOrderServiceImpl.java
@@ -251,10 +251,10 @@
page.setRecords(Collections.emptyList());
return page;
}
- long total = baseMapper.countAppletOrders(vinIds);
+ long total = baseMapper.countAppletOrders(appUserId, vinIds);
page.setTotal(total);
List<MyVinChargingOrderList> records = total == 0 ? Collections.emptyList()
- : baseMapper.pageAppletOrders(vinIds, (long) (current - 1) * size, size);
+ : baseMapper.pageAppletOrders(appUserId, vinIds, (long) (current - 1) * size, size);
fillAppletExtra(records);
page.setRecords(records);
return page;
@@ -482,7 +482,9 @@
tokenService.getLoginUserApplet().getUserId());
List<Long> vinIds = response == null ? Collections.emptyList()
: Optional.ofNullable(response.getData()).orElse(Collections.emptyList());
- return vinIds.contains(order.getVinId()) ? order : null;
+ // VIN 可换绑：除校验 VIN 当前归属外，还必须校验订单下单用户与当前登录用户一致，防止新绑定用户查看他人历史订单
+ Long appUserId = tokenService.getLoginUserApplet().getUserId();
+ return vinIds.contains(order.getVinId()) && appUserId.equals(order.getAppUserId()) ? order : null;
}
private Long toEpochMilli(LocalDateTime time) {
--
Gitblit v1.7.1