From 78b52c2063e7bc14696fb5b5f94ab43babad3945 Mon Sep 17 00:00:00 2001
From: yumoqing <yumoqing@gmail.com>
Date: Thu, 21 May 2026 22:53:14 +0800
Subject: [PATCH] bugfix

---
 dapi/dapi.py | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/dapi/dapi.py b/dapi/dapi.py
index ca41031..7bde0e4 100644
--- a/dapi/dapi.py
+++ b/dapi/dapi.py
@@ -136,7 +136,12 @@ async def get_user_dapp_apikey(dappid, userid):
 	"""
 	获得用户在downapp的apikey
 	"""
-	sql = """select b.* from downapp a, downapikey b where a.id=b.dappid and a.id=${dappid}$"""
+	sql = """select b.* 
+from downapp a, downapikey b 
+where a.id=b.dappid 
+	and a.id=${dappid}$
+	and b.userid=${userid}$
+	"""
 	env = ServerEnv()
 	async with get_sor_context(env, 'dapi') as sor:
 		recs = await sor.sqlExe(sql, {'dappid': dappid})
@@ -144,6 +149,9 @@ async def get_user_dapp_apikey(dappid, userid):
 			debug(f'{dappid=}, {userid=} not exist is downapikey')
 			return None
 		apikey = env.password_decode(recs[0].apikey)
+		for r in recs:
+			ak = env.password_decode(r.apikey)
+			debug(f'{r.userid}, apikey={ak}')
 		return apikey
 	return None