fix(auth): fail closed on token and validation checks

Made-with: Cursor
2026-04-29 17:32:08 +08:00
parent d6b9d1d0e3
commit 7e9c5105bb
5 changed files with 31 additions and 6 deletions
--- a/pro_v3.5.1/app/services/kefu/LoginServices.php
+++ b/pro_v3.5.1/app/services/kefu/LoginServices.php
@@ -81,7 +81,8 @@ class LoginServices extends BaseServices
            $token,
            'kefu',
            fn($id) => $this->dao->get($id),
-            fn($adminInfo) => md5($adminInfo->password)
+            fn($adminInfo) => md5($adminInfo->password),
+            fn($adminInfo) => $adminInfo->status && $adminInfo->account_status
        );

        return $adminInfo->hidden(['password', 'ip', 'status']);