diff --git a/pjcloud-hardware/pjcloud-hardware-biz/src/main/java/com/bsd/pjcloud/hard/service/impl/order/HardOrderServiceImpl.java b/pjcloud-hardware/pjcloud-hardware-biz/src/main/java/com/bsd/pjcloud/hard/service/impl/order/HardOrderServiceImpl.java
index d8464702b..c8630d461 100644
--- a/pjcloud-hardware/pjcloud-hardware-biz/src/main/java/com/bsd/pjcloud/hard/service/impl/order/HardOrderServiceImpl.java
+++ b/pjcloud-hardware/pjcloud-hardware-biz/src/main/java/com/bsd/pjcloud/hard/service/impl/order/HardOrderServiceImpl.java
@@ -1582,8 +1582,8 @@ public class HardOrderServiceImpl extends ServiceImpl<HardOrderMapper, HardOrder
         // 查询订单
         HardOrderEntity order = baseMapper.selectById(dto.getOrderId());
         if (ObjectUtil.isEmpty(order)) throw new RuntimeException("订单不存在");
-        // 查询用户
-        UserInfo userInfo = userService.getByUserId(order.getUserId()).getData();
+        // 查询用户（设备核销链路走 inner 端点，/user/get-by-user-id 有本人/管理员权限断言，设备 principal 会被 403）
+        UserInfo userInfo = userService.getInnerByUserId(order.getUserId()).getData();
         if (ObjectUtil.isEmpty(userInfo)) throw new RuntimeException("用户不存在");
         // 判断是否被核销过
         HardOrderTypeEnum orderType = HardOrderTypeEnum.valueOfByType(order.getOrderType());
diff --git a/pjcloud-hardware/pjcloud-hardware-biz/src/main/java/com/bsd/pjcloud/hard/service/impl/order/HardOrderSyncServiceImpl.java b/pjcloud-hardware/pjcloud-hardware-biz/src/main/java/com/bsd/pjcloud/hard/service/impl/order/HardOrderSyncServiceImpl.java
index eaa2855e3..f82c97939 100644
--- a/pjcloud-hardware/pjcloud-hardware-biz/src/main/java/com/bsd/pjcloud/hard/service/impl/order/HardOrderSyncServiceImpl.java
+++ b/pjcloud-hardware/pjcloud-hardware-biz/src/main/java/com/bsd/pjcloud/hard/service/impl/order/HardOrderSyncServiceImpl.java
@@ -87,8 +87,8 @@ public class HardOrderSyncServiceImpl implements HardOrderSyncService {
                 createIdList.add(findOrder.getAndroidOrderCode());
                 continue;
             }
-            // 查询用户
-            UserInfo userInfo = userService.getByUserId(i.getUserCode()).getData();
+            // 查询用户（设备链路走 inner 端点，/user/get-by-user-id 有本人/管理员权限断言，设备 principal 会被 403）
+            UserInfo userInfo = userService.getInnerByUserId(i.getUserCode()).getData();
             if (ObjectUtil.isEmpty(userInfo)) {
                 log.error("|{}|同步安卓机离线订单,用户不存在:{}", TAG, JSON.toJSONString(i));
                 continue;