fix: 修复个人信息设置功能的bug

Closes #1087
This commit is contained in:
Captain.B 2021-01-08 17:44:29 +08:00
parent 9723f85c46
commit ddd640c7c1
1 changed files with 4 additions and 0 deletions

View File

@ -136,6 +136,10 @@ public class UserController {
@PostMapping("/update/current") @PostMapping("/update/current")
public UserDTO updateCurrentUser(@RequestBody User user) { public UserDTO updateCurrentUser(@RequestBody User user) {
String currentUserId = SessionUtils.getUserId();
if (!StringUtils.equals(currentUserId, user.getId())) {
MSException.throwException(Translator.get("not_authorized"));
}
userService.updateUser(user); userService.updateUser(user);
UserDTO userDTO = userService.getUserDTO(user.getId()); UserDTO userDTO = userService.getUserDTO(user.getId());
SessionUtils.putUser(SessionUser.fromUser(userDTO)); SessionUtils.putUser(SessionUser.fromUser(userDTO));