From b4119d9dfafe684aae7bbd18c8a565ec99462b4d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=88=98=E6=B3=89=E4=BD=B3?= <1107186916@qq.com>
Date: Sat, 10 Oct 2026 09:38:46 +0800
Subject: [PATCH] =?UTF-8?q?feat:=20=E9=87=91=E8=9D=B6=E8=A7=A3=E9=94=81?=
 =?UTF-8?q?=E5=9B=9E=E8=B0=83=E7=AB=AF=E7=82=B9=E5=8A=A0=E5=85=A5secure?=
 =?UTF-8?q?=E5=85=8D=E7=99=BB=E6=94=BE=E8=A1=8C=E7=99=BD=E5=90=8D=E5=8D=95?=
 =?UTF-8?q?=EF=BC=88blade.secure.skip-url=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ...�务流程（lockBusiData锁定-unLockNotifyBusiData回调-失败补偿-删单还原）.md | 3 ++-
 doc/nacos/blade.yaml                                           | 3 +++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/doc/docs/业务流程/2026-10-09-金蝶单据锁定与解锁业务流程（lockBusiData锁定-unLockNotifyBusiData回调-失败补偿-删单还原）.md b/doc/docs/业务流程/2026-10-09-金蝶单据锁定与解锁业务流程（lockBusiData锁定-unLockNotifyBusiData回调-失败补偿-删单还原）.md
index 356569e7..a417d552 100644
--- a/doc/docs/业务流程/2026-10-09-金蝶单据锁定与解锁业务流程（lockBusiData锁定-unLockNotifyBusiData回调-失败补偿-删单还原）.md
+++ b/doc/docs/业务流程/2026-10-09-金蝶单据锁定与解锁业务流程（lockBusiData锁定-unLockNotifyBusiData回调-失败补偿-删单还原）.md
@@ -124,5 +124,6 @@ failed（锁定失败，待补偿）→ locked（金蝶锁定中）→ unlocked
 
 1. Nacos 配置 `thirdParty.bfi.billLockUrl`：lockBusiData 真实路径（代码默认占位 `/ierp/kapi/app/billLock/lockBusiData`，以金蝶最终提供为准）
 2. Nacos 开启补偿：`thirdParty.bfi.billLock.retryEnabled: true`（按环境）
-3. 向金蝶提供回调地址：网关地址 + transport 服务路由 + `/kingdee-bfi/unLockNotifyBusiData`
+3. 向金蝶提供回调地址：网关地址 + transport 服务路由 + `/kingdee-bfi/unLockNotifyBusiData`；
+   免登免授权已双层配置——网关/secure 白名单 `blade.secure.skip-url` 放行 `/blade-transport/kingdee-bfi/**` 与 `/kingdee-bfi/**`（doc/nacos/blade.yaml，需同步到 Nacos 实际配置），服务侧端点 `@PreAuth(AuthConstant.PERMIT_ALL) + @TenantIgnore`
 4. 与金蝶确认 WLTMS 单据类型编码（SETTLEMENT/INVOICE_APPLY）与 DELETE 还原口径
diff --git a/doc/nacos/blade.yaml b/doc/nacos/blade.yaml
index 2f80484c..9ec6f305 100644
--- a/doc/nacos/blade.yaml
+++ b/doc/nacos/blade.yaml
@@ -228,6 +228,9 @@ blade:
       - /customer-archive/public/**
       - /blade-transport/mk-process/public/**
       - /mk-process/public/**
+      # 金蝶单据解锁回调（unLockNotifyBusiData）：金蝶侧无令牌调用，免登免授权
+      - /blade-transport/kingdee-bfi/**
+      - /kingdee-bfi/**
       - /blade-openapi/openApi/mk/process/commonCallback
       - /openApi/mk/process/commonCallback
       - /feign/client/businessProcess/getCurrentNodes