diff --git a/boot-starter/boot-starter-security-oauth/src/main/java/com/micro/fast/security/app/validate/code/AppValidateCodeRepository.java b/boot-starter/boot-starter-security-oauth/src/main/java/com/micro/fast/security/app/validate/code/AppValidateCodeRepository.java
index e0f697f..904e626 100644
--- a/boot-starter/boot-starter-security-oauth/src/main/java/com/micro/fast/security/app/validate/code/AppValidateCodeRepository.java
+++ b/boot-starter/boot-starter-security-oauth/src/main/java/com/micro/fast/security/app/validate/code/AppValidateCodeRepository.java
@@ -46,9 +46,9 @@ public class AppValidateCodeRepository implements ValidateCodeRepository {
      * @return
      */
     private String buildKey(ServletWebRequest request,String validateCodeType){
-      String deviceId = request.getHeader("deviceId");
+      String deviceId = request.getParameter("deviceId");
       if (StringUtils.isBlank(deviceId)){
-          throw new ValidateCodeException("请求头中缺少机器的唯一识别");
+          throw new ValidateCodeException("请求参数中缺少机器的唯一识别");
       }
       return "code:"+validateCodeType.toLowerCase()+":"+deviceId;
     }