From 2c10db5b241c7d4d980acdd1d6cc76b8aafadbab Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=91=A8=E9=B9=8F?= <812968653@qq.com>
Date: Mon, 31 Aug 2026 19:16:59 +0800
Subject: [PATCH] =?UTF-8?q?bug=E4=BF=AE=E6=94=B9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../app/auth/AppAuthController.java           |  8 ++++++
 .../airline/MemberAirlineAccountMapper.java   |  4 +++
 .../airline/MemberAirlineAccountService.java  |  5 ++++
 .../MemberAirlineAccountServiceImpl.java      | 26 +++++++++++++++++++
 .../service/auth/MemberAuthService.java       |  6 +++++
 .../service/auth/MemberAuthServiceImpl.java   |  5 ++++
 6 files changed, 54 insertions(+)

diff --git a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/controller/app/auth/AppAuthController.java b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/controller/app/auth/AppAuthController.java
index bd7d7dd..36f1aba 100644
--- a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/controller/app/auth/AppAuthController.java
+++ b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/controller/app/auth/AppAuthController.java
@@ -56,6 +56,14 @@ public class AppAuthController {
         return success(authService.airlineLogin(reqVO));
     }
 
+    @GetMapping("/airline-check")
+    @Operation(summary = "航空账号会话校验（禁用/过期/设备不匹配则失败）")
+    @Parameter(name = "deviceId", description = "设备唯一识别号", required = true)
+    public CommonResult<Boolean> airlineCheck(@RequestParam("deviceId") String deviceId) {
+        authService.airlineCheck(getLoginUserId(), deviceId);
+        return success(true);
+    }
+
     @PostMapping("/logout")
     @Operation(summary = "登出系统")
     @PermitAll
diff --git a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/dal/mysql/airline/MemberAirlineAccountMapper.java b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/dal/mysql/airline/MemberAirlineAccountMapper.java
index fc36788..eb3bf79 100644
--- a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/dal/mysql/airline/MemberAirlineAccountMapper.java
+++ b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/dal/mysql/airline/MemberAirlineAccountMapper.java
@@ -27,4 +27,8 @@ public interface MemberAirlineAccountMapper extends BaseMapperX<MemberAirlineAcc
         return selectOne(MemberAirlineAccountDO::getDeviceId, deviceId);
     }
 
+    default MemberAirlineAccountDO selectByUserId(Long userId) {
+        return selectOne(MemberAirlineAccountDO::getUserId, userId);
+    }
+
 }
diff --git a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/airline/MemberAirlineAccountService.java b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/airline/MemberAirlineAccountService.java
index 421e793..2ccc741 100644
--- a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/airline/MemberAirlineAccountService.java
+++ b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/airline/MemberAirlineAccountService.java
@@ -35,4 +35,9 @@ public interface MemberAirlineAccountService {
      */
     MemberAirlineAccountDO authenticateAndBindDevice(String mobile, String password, String deviceId);
 
+    /**
+     * 会话校验：已登录用户打开 App 时检查账号是否禁用/过期/设备不匹配。
+     */
+    void validateAirlineSession(Long userId, String deviceId);
+
 }
diff --git a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/airline/MemberAirlineAccountServiceImpl.java b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/airline/MemberAirlineAccountServiceImpl.java
index 541aada..d0fe7db 100644
--- a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/airline/MemberAirlineAccountServiceImpl.java
+++ b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/airline/MemberAirlineAccountServiceImpl.java
@@ -130,6 +130,32 @@ public class MemberAirlineAccountServiceImpl implements MemberAirlineAccountServ
         return account;
     }
 
+    @Override
+    public void validateAirlineSession(Long userId, String deviceId) {
+        if (userId == null) {
+            throw exception(AIRLINE_ACCOUNT_NOT_EXISTS);
+        }
+        MemberAirlineAccountDO account = airlineAccountMapper.selectByUserId(userId);
+        if (account == null) {
+            throw exception(AIRLINE_ACCOUNT_NOT_EXISTS);
+        }
+        if (CommonStatusEnum.isDisable(account.getStatus())) {
+            throw exception(AIRLINE_ACCOUNT_DISABLED);
+        }
+        LocalDateTime now = LocalDateTime.now();
+        if (account.getStartTime() != null && now.isBefore(account.getStartTime())) {
+            throw exception(AIRLINE_ACCOUNT_NOT_STARTED);
+        }
+        if (account.getEndTime() != null && now.isAfter(account.getEndTime())) {
+            throw exception(AIRLINE_ACCOUNT_EXPIRED);
+        }
+        String boundDeviceId = account.getDeviceId();
+        if (StrUtil.isNotBlank(boundDeviceId) && StrUtil.isNotBlank(deviceId)
+                && !StrUtil.equals(boundDeviceId, deviceId)) {
+            throw exception(AIRLINE_ACCOUNT_DEVICE_BOUND);
+        }
+    }
+
     private MemberAirlineAccountDO validateExists(Long id) {
         MemberAirlineAccountDO account = airlineAccountMapper.selectById(id);
         if (account == null) {
diff --git a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/auth/MemberAuthService.java b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/auth/MemberAuthService.java
index b0d9b58..2365656 100644
--- a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/auth/MemberAuthService.java
+++ b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/auth/MemberAuthService.java
@@ -114,4 +114,10 @@ public interface MemberAuthService {
      * 航空账号登录：校验密码、有效期、设备唯一绑定，并签发会员 Token
      */
     AppAuthLoginRespVO airlineLogin(@Valid AppAuthAirlineLoginReqVO reqVO);
+
+    /**
+     * 航空账号会话校验（已登录）：禁用/过期/设备不匹配时抛业务异常
+     */
+    void airlineCheck(Long userId, String deviceId);
+
 }
diff --git a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/auth/MemberAuthServiceImpl.java b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/auth/MemberAuthServiceImpl.java
index 418f8f4..dbc1b7e 100644
--- a/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/auth/MemberAuthServiceImpl.java
+++ b/yudao-module-member/yudao-module-member-biz/src/main/java/cn/iocoder/yudao/module/member/service/auth/MemberAuthServiceImpl.java
@@ -432,6 +432,11 @@ public class MemberAuthServiceImpl implements MemberAuthService {
         return createTokenAfterLoginSuccess(user, reqVO.getMobile(), LoginLogTypeEnum.LOGIN_MOBILE, null);
     }
 
+    @Override
+    public void airlineCheck(Long userId, String deviceId) {
+        airlineAccountService.validateAirlineSession(userId, deviceId);
+    }
+
     private void createLogoutLog(Long userId) {
         LoginLogCreateReqDTO reqDTO = new LoginLogCreateReqDTO();
         reqDTO.setLogType(LoginLogTypeEnum.LOGOUT_SELF.getType());