openapi 1.1

server/app/Http/Controllers/V1/Auth/CustomerAuthController.php

@@ -48,8 +48,8 @@ class CustomerAuthController extends Controller
      *             @Schema(
      *                 required={"customerToken"},
      *                 @Property(property="customerToken", @Schema(type="string"),description="用户私有key"),
+     *                 example={"customerToken":"cKCXPza6y23l_c0z"}
      *             ),
-     *             @OA\Examples(example="customerToken", value="cKCXPza6y23l_c0z",summary=""),
      *         )
      *     ),
      *     @AnnotationResponse(

server/app/Services/Api/RhawnOrdersService.php

@@ -18,6 +18,7 @@ use App\Rhawn\Repositories\Eloquent\RhawnCustomerRepositoryEloquent;
 use App\Rhawn\Services\RhawnCustomerService;
 use App\Support\Facades\SimpleLogs;
 use Illuminate\Support\Facades\DB;
+use mysql_xdevapi\Exception;
 
 class RhawnOrdersService
 {
@@ -231,14 +232,15 @@ class RhawnOrdersService
             if(!$order){
                 throw new \Exception('订单编号不存在',500);
             }
+            if($order['cus_id'] != $customer['cus_id']){
+                throw new Exception('该订单你无权操作',500);
+            }
             $dpdetail = $this->rhawnOrdersService->getOrderDispatchDetail($order['so_no']);
             if($dpdetail){
                 $dpdetail = app(OrdersDispatchTransformer::class)->transform($dpdetail);
             }
             return $dpdetail;
         }catch(\Throwable $exception){
-            var_dump($exception->getMessage());
-            exit;
             SimpleLogs::writeLog($exception->getMessage(),__CLASS__.':getOrderDispatchByOrderNumber','error');
             throw $exception;
         }