From cb529480ee0812ba27a357f800380eca00ab8597 Mon Sep 17 00:00:00 2001
From: sh <sh@zkr.com>
Date: Thu, 9 Apr 2026 23:04:38 +0800
Subject: [PATCH] =?UTF-8?q?1.=E4=BF=AE=E6=94=B9=E6=96=B9=E6=B3=95=E5=90=8D?=
 =?UTF-8?q?=E7=A7=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../web/service/SysLoginService.java          | 34 +++++++++++++++++--
 1 file changed, 32 insertions(+), 2 deletions(-)

diff --git a/ruoyi-framework/src/main/java/com/ruoyi/framework/web/service/SysLoginService.java b/ruoyi-framework/src/main/java/com/ruoyi/framework/web/service/SysLoginService.java
index 2191385..75773f8 100644
--- a/ruoyi-framework/src/main/java/com/ruoyi/framework/web/service/SysLoginService.java
+++ b/ruoyi-framework/src/main/java/com/ruoyi/framework/web/service/SysLoginService.java
@@ -333,7 +333,7 @@ public class SysLoginService
      * @return
      */
     public AjaxResult getWxPhone(LoginBody dto){
-        AjaxResult validateResult = validateBaseParam(dto);
+        AjaxResult validateResult = validSmsPhone(dto);
         if (validateResult != null) {
             return validateResult;
         }
@@ -442,7 +442,7 @@ public class SysLoginService
      */
     public AjaxResult appLoginTwo(LoginBody dto) {
         // 1. 验证基础参数（前端userType仅0/1，拦截非法参数）
-        AjaxResult validateResult = validateBaseParam(dto);
+        AjaxResult validateResult = validateUserType(dto);
         if (validateResult != null) {
             return validateResult;
         }
@@ -578,6 +578,36 @@ public class SysLoginService
         return null;
     }
 
+    /**
+     * 验证获取手机号参数
+     * @param dto
+     * @return
+     */
+    private AjaxResult validSmsPhone(LoginBody dto){
+        if (dto == null) {
+            return AjaxResult.error(ParamErrorConstants.PARAM_NULL_MSG);
+        }
+        if (StringUtils.isEmpty(dto.getCode())) {
+            return AjaxResult.error(ParamErrorConstants.CODE_EMPTY_MSG);
+        }
+        return null;
+    }
+
+    /**
+     * 验证角色
+     * @param dto
+     * @return
+     */
+    private AjaxResult validateUserType(LoginBody dto){
+        String userType = dto.getUserType();
+        if (StringUtils.isEmpty(userType) ||
+                !StringUtil.IS_COMPANY_USER.equals(userType) &&
+                        !StringUtil.IS_JOB_REQUEST_USER.equals(userType)) {
+            return AjaxResult.error(ParamErrorConstants.USER_TYPE_INVALID_MSG);
+        }
+        return null;
+    }
+
     /**
      * 2-微信授权信息获取（封装code2Session逻辑）
      * @param code