From da29c3235787cb1ebeb0ae540e15c62a2a6bfaaa Mon Sep 17 00:00:00 2001
From: TinyAnts <tinyants@163.com>
Date: Tue, 14 Mar 2023 14:59:30 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D:=20=E6=89=AB=E7=A0=81?=
 =?UTF-8?q?=E7=99=BB=E5=BD=95state=E6=A3=80=E6=B5=8B?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../java/com/mdd/front/service/impl/LoginServiceImpl.java     | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/server/like-front/src/main/java/com/mdd/front/service/impl/LoginServiceImpl.java b/server/like-front/src/main/java/com/mdd/front/service/impl/LoginServiceImpl.java
index 8e08763c..2993eb8f 100644
--- a/server/like-front/src/main/java/com/mdd/front/service/impl/LoginServiceImpl.java
+++ b/server/like-front/src/main/java/com/mdd/front/service/impl/LoginServiceImpl.java
@@ -241,6 +241,10 @@ public class LoginServiceImpl implements ILoginService {
      */
     @Override
     public LoginTokenVo scanLogin(String code, String state, Integer terminal, HttpSession session) {
+        if (!ScanLoginCache.get(session.getId()).equals(state)) {
+            throw new OperateException("二维码已失效或不存在,请重新操作");
+        }
+
         // 得到配置和授权临时票据code
         String appId = ConfigUtils.get("op_channel", "appId", "");
         String appSecret = ConfigUtils.get("op_channel", "appSecret", "");