From 7767f4b262ce99175c00b8002b02949e4d716a78 Mon Sep 17 00:00:00 2001
From: xxq250 <xxq250@qq.com>
Date: Tue, 11 Jun 2024 10:28:55 +0800
Subject: [PATCH] =?UTF-8?q?=E5=AE=9A=E5=88=B6=E7=94=A8=E6=88=B7=E6=9F=A5?=
 =?UTF-8?q?=E8=AF=A2=E6=8E=A5=E5=8F=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/controllers/users_controller.rb | 11 ++++++++++-
 config/routes.rb                    |  1 +
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index d7608ec3d..b976ee8fa 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -702,6 +702,15 @@ class UsersController < ApplicationController
     @user = User.find_by(mail: params[:email])
   end
 
+  #根据login获取用户信息
+  def get_user_info_by_login
+    private_token = "hriEn3UwXfJs3PmyXnSH"
+    sign = Digest::MD5.hexdigest("#{private_token}:#{params[:login]}")
+    tip_exception(401, '401 Unauthorized')  unless params[:sign].to_s == sign
+    user = User.find_by_login params[:login]
+    render_ok(data: {username: user.real_name, school: user.custom_department, login: user.login, phone: user.phone, mail: user.mail})
+  end
+
   private
   def load_user
     @user = User.find_by_login(params[:id]) || User.find_by(id: params[:id])
@@ -731,7 +740,7 @@ class UsersController < ApplicationController
   end
 
   def sso_login
-    if params[:login].present? && !current_user.logged? && params[:websiteName].present?
+    if params[:login].present? && !current_user.logged? && params[:websiteName].present? && request.referer.to_s.include?("gitlink.org.cn")
       user = User.where("login = ?", "#{params[:login].presence}").first
       # 已同步注册，直接登录
       if user.present?
diff --git a/config/routes.rb b/config/routes.rb
index a25447641..75caa100d 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -288,6 +288,7 @@ Rails.application.routes.draw do
         post :following
         post :unfollow
         get :get_user_info
+        get :get_user_info_by_login
         get :attachment_show
         get :html_show
         get :get_navigation_info