diff --git a/app/controller/Order.php b/app/controller/Order.php
index 0956b24..b5fcf6a 100644
--- a/app/controller/Order.php
+++ b/app/controller/Order.php
@@ -39,11 +39,14 @@ class Order
             'status'     => 0,
         ]);
 
+        $tokenData = ['userid' => $userid, 'loginTime' => time(), 'rankStr' => strRand(5)];
+        $token     = authcode(json_encode($tokenData), 'ENCODE');
+
         return show("订单创建成功！", SUCCESS_CODE, [
             'payment_url' => $notifyUrl = Route::buildUrl('wechat/payment')
                 ->vars([
                     'order_id' => $order->id,
-                    'token'    => '这里要直接获取当前用户的TOKEN传过去',
+                    'token'    => $token,
                 ])
                 ->suffix(false)
                 ->domain(true)