1

app/controller/response.js

@@ -34,12 +34,22 @@ class ResponseController extends Controller {
         const device_id = ctx.cookies.get('device_id', { signed: false });
         const device_login_id = ctx.cookies.get('device_login_id', { signed: false });
         ctx.logger.info('target_user--' + JSON.stringify({ target_cookies_user: { token, user_id, app_user_id, device_id, device_login_id } }));
+
+
+        const user_sid = ctx.cookies.get('jianbing_customer_id', { signed: false });
+        // 判断user_sid 和 app_user_id
+        
+        if (app_user_id) {
+            const result = await ctx.helper.send_request(this.config.USER_CENTER_API_URI + '/v1/appusers/' + app_user_id, {}, { method: 'GET', dataType: 'json' });
+            const ret_appuid = result.status === 200 ? result.data : {};
+            if (ret_appuid.oid === user_sid) {
                 if (token && user_id && app_user_id && device_id && device_login_id) {
                     ctx.redirect(target_url2);
                     return;
                 }
+            }
+        }      
         
-        const user_sid = ctx.cookies.get('jianbing_customer_id', { signed: false });
         const auth_token = ctx.cookies.get('auth_token', { signed: false });
         // ctx.logger.info('target_user--' + new Date().getTime() + JSON.stringify({ target_old_user: { auth_token, user_sid } }));
         const phone_info = await ctx.service.user.get_phone_by_user_sid({ user_sid: user_sid, token: auth_token });//获取用户手机号码