From f889eeab772cb76163baa56b57f82aac57a885f7 Mon Sep 17 00:00:00 2001
From: wells <123456@qq.com>
Date: Wed, 5 Aug 2026 17:31:09 +0800
Subject: [PATCH] =?UTF-8?q?fix=20=E8=AE=BE=E7=BD=AE=E5=B0=BE=E6=95=B0(?=
 =?UTF-8?q?=E7=99=BD=E5=90=8D=E5=8D=95=E7=94=A8=E6=88=B7)=E6=9D=83?=
 =?UTF-8?q?=E9=99=90=E9=AA=8C=E8=AF=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../java/com/tailbet/controller/GameController.java  | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/src/main/java/com/tailbet/controller/GameController.java b/src/main/java/com/tailbet/controller/GameController.java
index 39cbf8a..0a31b22 100644
--- a/src/main/java/com/tailbet/controller/GameController.java
+++ b/src/main/java/com/tailbet/controller/GameController.java
@@ -1,17 +1,20 @@
 package com.tailbet.controller;
 
 import com.tailbet.job.GameJob;
+import com.tailbet.mapper.DigitWhiteMapper;
 import com.tailbet.model.dto.BetDTO;
 import com.tailbet.model.dto.GameOperateDTO;
 import com.tailbet.model.dto.HistoryQueryDTO;
 import com.tailbet.model.dto.SetDigitDTO;
 import com.tailbet.model.entity.BetOrder;
+import com.tailbet.model.entity.DigitWhite;
 import com.tailbet.model.entity.GameRound;
 import com.tailbet.model.vo.DigitTrialVo;
 import com.tailbet.model.vo.R;
 import com.tailbet.model.vo.UserContext;
 import com.tailbet.service.IBetService;
 import com.tailbet.service.IGameService;
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
 import lombok.RequiredArgsConstructor;
 import org.springframework.web.bind.annotation.*;
@@ -29,6 +32,7 @@ public class GameController {
     private final IGameService gameService;
     private final IBetService betService;
     private final GameJob gameJob;
+    private final DigitWhiteMapper digitWhiteMapper;
 
     /**
      * 开始游戏(群主)
@@ -124,6 +128,14 @@ public class GameController {
     public R<Void> setDigit(@RequestBody SetDigitDTO dto) {
         try {
             Long userId = UserContext.getUserId();
+
+            // 验证白名单权限
+            DigitWhite white = digitWhiteMapper.selectOne(new LambdaQueryWrapper<DigitWhite>()
+                    .eq(DigitWhite::getUserId, userId));
+            if (white == null) {
+                return R.fail("您不是白名单用户，无权设置尾数");
+            }
+
             gameService.setTargetDigit(dto.getGroupId(), dto.getDigit(), userId);
             return R.ok();
         } catch (RuntimeException e) {