From 46121554576bfa80b52ca9c82689e0cbb39fe9e0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E8=B5=B5=E5=BF=A0=E6=9E=97?= <170083662@qq.com>
Date: Thu, 6 Aug 2026 16:52:37 +0800
Subject: [PATCH] =?UTF-8?q?fix(security):=20=E6=B7=BB=E5=8A=A0/api/grantCm?=
 =?UTF-8?q?sPermission=E6=8E=A5=E5=8F=A3=E5=88=B0=E5=AE=89=E5=85=A8?=
 =?UTF-8?q?=E5=BF=BD=E7=95=A5=E5=88=97=E8=A1=A8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 在SecurityConfig中将/api/grantCmsPermission加入忽略验证的接口列表
- 确保该接口无需身份验证即可访问
- 维护现有的公共接口安全策略
---
 .../java/com/gxwebsoft/common/core/security/SecurityConfig.java  | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java b/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java
index 91fbc5a..cd8525f 100644
--- a/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java
+++ b/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java
@@ -43,6 +43,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
                         "/api/loginByUserId",
                         "/api/loginByEmail",
                         "/api/register",
+                        "/api/grantCmsPermission",
                         "/api/superAdminRegister",
                         "/api/findAccountByPhone",
                         "/api/resetPassword",