Antiloveg 8 years ago
parent
commit
3fd474e284

+ 9 - 0
src/main/java/com/goafanti/portal/controller/PortalOrderApiController.java

@@ -37,6 +37,7 @@ import com.goafanti.common.model.AchievementOrderLog;
 import com.goafanti.common.model.Demand;
 import com.goafanti.common.model.DemandOrder;
 import com.goafanti.common.model.DemandOrderLog;
+import com.goafanti.common.model.User;
 import com.goafanti.core.shiro.token.TokenManager;
 import com.goafanti.demand.bo.InputDemandOrder;
 import com.goafanti.demand.service.DemandOrderLogService;
@@ -132,6 +133,10 @@ public class PortalOrderApiController extends CertifyApiController {
 	@RequestMapping(value = "/orderAchievement", method = RequestMethod.POST)
 	public Result orderAchievement(@Valid InputAchievementOrder order, BindingResult bindingResult) {
 		Result res = new Result();
+		if(!(TokenManager.getToken() instanceof User)){
+			res.getError().add(buildError(ErrorConstants.NON_LOGIN));
+			return res;
+		}
 		if (bindingResult.hasErrors()) {
 			res.getError().add(buildErrorByMsg(bindingResult.getFieldError().getDefaultMessage(),
 					AchievementOrderFields.getFieldDesc(bindingResult.getFieldError().getField())));
@@ -255,6 +260,10 @@ public class PortalOrderApiController extends CertifyApiController {
 	@RequestMapping(value = "/orderDemand", method = RequestMethod.POST)
 	public Result orderDemand(@Valid InputDemandOrder inputDemandOrder, BindingResult bindingResult) {
 		Result res = new Result();
+		if(!(TokenManager.getToken() instanceof User)){
+			res.getError().add(buildError(ErrorConstants.NON_LOGIN));
+			return res;
+		}
 		if (bindingResult.hasErrors()) {
 			res.getError().add(buildErrorByMsg(bindingResult.getFieldError().getDefaultMessage(),
 					DemandOrderFields.getFieldDesc(bindingResult.getFieldError().getField())));