diff --git a/src/addon/aikefu/api/controller/WebSocket.php b/src/addon/aikefu/api/controller/WebSocket.php index fcd61b3eb..dcd9f2e95 100644 --- a/src/addon/aikefu/api/controller/WebSocket.php +++ b/src/addon/aikefu/api/controller/WebSocket.php @@ -195,7 +195,7 @@ class WebSocket extends WebSocketBase } // member_id 必须一致,避免冒用 - if ((int)$data['member_id'] !== $member_id) { + if ((int)$data['member_id'] !== $user_id) { throw new \Exception('TOKEN_ERROR'); } diff --git a/src/app/api/controller/WebSocketBase.php b/src/app/api/controller/WebSocketBase.php index 8cf665f6d..a467d5213 100644 --- a/src/app/api/controller/WebSocketBase.php +++ b/src/app/api/controller/WebSocketBase.php @@ -149,7 +149,10 @@ abstract class WebSocketBase implements MessageComponentInterface $user_id = $data['user_id'] ?? null; $token = $data['token'] ?? null; - if (empty($site_id) || empty($user_id) || empty($token)) { + // 暂时开放使用,后期根据配置或者实际需要,需要对其他参数进行验证 + if (empty($site_id) + // || empty($user_id) || empty($token) + ) { throw new \Exception('Missing authentication parameters'); }