fix: 修复被禁用的账户可以通过短信验证码再次登录的问题

(cherry picked from commit fcfd68ac1c979374d0916ed87995030c465e9428)

fix: 修复被禁用的账户可以通过短信验证码再次登录的问题
(cherry picked from commit fcfd68ac1c979374d0916ed87995030c465e9428)
DevDengChao
1 parent 97e8c35f
Showing 1 changed file with 6 additions and 0 deletions
yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/auth/MemberAuthServiceImpl.java
@@ -88,6 +88,12 @@ public class MemberAuthServiceImpl implements MemberAuthService {
         MemberUserDO user = userService.createUserIfAbsent(reqVO.getMobile(), userIp, getTerminal());
         Assert.notNull(user, "获取用户失败，结果为空");
  
+        // 校验是否禁用
+        if (ObjectUtil.notEqual(user.getStatus(), CommonStatusEnum.ENABLE.getStatus())) {
+            createLoginLog(user.getId(), reqVO.getMobile(), LoginLogTypeEnum.LOGIN_SMS, LoginResultEnum.USER_DISABLED);
+            throw exception(AUTH_LOGIN_USER_DISABLED);
+        }
+
         // 如果 socialType 非空，说明需要绑定社交用户
         String openid = null;
         if (reqVO.getSocialType() != null) {