fix(auth): scope mobile sms users by tenant

2026-07-14 06:59:11 +08:00
parent 599f025295
commit 03d4b97f75
3 changed files with 29 additions and 1 deletions
@@ -89,7 +89,9 @@ public class SmsAuthStrategy implements IAuthStrategy {
    }

    private SysUserVo loadOrRegisterUserByPhonenumber(String tenantId, String phonenumber) {
-        SysUserVo user = userMapper.selectVoOne(new LambdaQueryWrapper<SysUser>().eq(SysUser::getPhonenumber, phonenumber));
+        SysUserVo user = userMapper.selectVoOne(new LambdaQueryWrapper<SysUser>()
+            .eq(SysUser::getTenantId, tenantId)
+            .eq(SysUser::getPhonenumber, phonenumber));
        if (ObjectUtil.isNull(user)) {
            SysUser sysUser = new SysUser();
            sysUser.setTenantId(tenantId);