diff --git a/src/main/java/com/gxwebsoft/common/system/controller/AliOssController.java b/src/main/java/com/gxwebsoft/common/system/controller/AliOssController.java
index 3a71031..4d3319d 100644
--- a/src/main/java/com/gxwebsoft/common/system/controller/AliOssController.java
+++ b/src/main/java/com/gxwebsoft/common/system/controller/AliOssController.java
@@ -27,6 +27,7 @@ import com.gxwebsoft.common.core.web.ApiResult;
 import com.gxwebsoft.common.core.web.BaseController;
 import com.gxwebsoft.common.system.entity.Company;
 import com.gxwebsoft.common.system.entity.FileRecord;
+import com.gxwebsoft.common.system.entity.User;
 import com.gxwebsoft.common.system.service.CompanyService;
 import com.gxwebsoft.common.system.service.FileRecordService;
 import com.gxwebsoft.common.system.service.SettingService;
@@ -197,6 +198,10 @@ public class AliOssController extends BaseController {
   @ApiOperation("获取临时osstoken")
   @GetMapping("/getSTSToken")
   public ApiResult<?> getSTSToken() {
+    final User loginUser = getLoginUser();
+    if(loginUser == null){
+      return fail("请先登录");
+    }
     // STS接入地址，例如sts.cn-hangzhou.aliyuncs.com。
     String endpoint = "sts.cn-shenzhen.aliyuncs.com";
     // 填写步骤1生成的RAM用户访问密钥AccessKey ID和AccessKey Secret。