fix(security): 移除登录白名单中的 /api/grantCmsPermission 接口

- 从安全配置中剔除 /api/grantCmsPermission 接口的免认证访问
- 加强接口访问控制,防止未授权的权限授予操作
- 确保 CMS 权限管理接口需要严格认证验证
This commit is contained in:
2026-08-06 19:12:11 +08:00
parent 4612155457
commit d532f6717f

View File

@@ -43,7 +43,6 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
"/api/loginByUserId", "/api/loginByUserId",
"/api/loginByEmail", "/api/loginByEmail",
"/api/register", "/api/register",
"/api/grantCmsPermission",
"/api/superAdminRegister", "/api/superAdminRegister",
"/api/findAccountByPhone", "/api/findAccountByPhone",
"/api/resetPassword", "/api/resetPassword",