修改了bug

websocket.js

@@ -3,7 +3,7 @@ import http from 'http';
 import { DBModel } from "./models/index.js";
 import { chatTask } from "./agent/bots/bot-escort/task.js";
 import { adminAgent } from "./agent/bots/bot-escort-admin/agent.js"
-import { getUserInfo } from "./utils/user_service.js";
+import { getUserByToken } from "./utils/user_service.js";
 
 export default class WebSocketServerManager {
   constructor(port = 8080) {
@@ -71,9 +71,10 @@ export default class WebSocketServerManager {
   async _handleMessage(ws, data) {
     try {
       const raw = data.toString();
-      console.log('Received:', raw);
 
       const msg = JSON.parse(raw);
+      // 只记录消息类型：正文含健康描述、token/userId 属敏感信息，不进日志
+      console.log('Received message type:', msg.type);
 
       if (msg.type === 'ping') {
         ws.send(JSON.stringify({ type: 'pong' }));
@@ -91,7 +92,12 @@ export default class WebSocketServerManager {
         };
 
         try {
-          const userInfo = await getUserInfo(msg.token, msg.userId);
+          // 身份只认 token：不再接受凭 userId 明文接入，防止冒充他人聊天
+          if (!msg.token) {
+            ws.send(JSON.stringify({ type: 'error', content: '缺少登录凭证，请重新登录' }));
+            return;
+          }
+          const userInfo = await getUserByToken(msg.token);
           if (!userInfo) {
             ws.send(JSON.stringify({ type: 'error', content: '登录已失效' }));
             return;
@@ -122,7 +128,7 @@ export default class WebSocketServerManager {
         return;
       }
 
-      console.log('[Unknown type]', msg);
+      console.log('[Unknown message type]', msg.type);
     } catch (e) {
       console.error('Message parse error:', e);
       ws.send(JSON.stringify({ type: 'error', content: 'Invalid JSON' }));