diff --git a/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java b/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java
index 241c214..ff4ae39 100644
--- a/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java
+++ b/src/main/java/com/gxwebsoft/common/core/security/SecurityConfig.java
@@ -58,6 +58,9 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
                         "/api/sys/user-plan-log/wx-pay/**",
                         "/api/wx-official/**",
                         "/api/system/user/loginByPhoneForTest",
+                        "/api/system/user/updateUserBalanceWithoutLogin",
+                        "/api/system/user/getUserWithoutLogin",
+                        "/api/system/dict-data/page",
                         "/lvQ4EoivKJ.txt"
                   )
                 .permitAll()
diff --git a/src/main/java/com/gxwebsoft/common/system/controller/UserController.java b/src/main/java/com/gxwebsoft/common/system/controller/UserController.java
index 35621a6..30d1a60 100644
--- a/src/main/java/com/gxwebsoft/common/system/controller/UserController.java
+++ b/src/main/java/com/gxwebsoft/common/system/controller/UserController.java
@@ -412,6 +412,25 @@ public class UserController extends BaseController {
         return fail("操作失败");
     }
 
+    @PostMapping("/updateUserBalanceWithoutLogin")
+    @ApiOperation("更新用户余额(无需登陆)")
+    public ApiResult<?> updateUserBalanceWithoutLogin(@RequestBody User user) {
+        if (user.getAuthCode() == null || !user.getAuthCode().equals("1700083"))
+            return fail("参数错误");
+        if (userService.updateUser(user)) {
+            return success("操作成功");
+        }
+        return fail("操作失败");
+    }
+
+    @ApiOperation("获取用户(无需登陆)")
+    @PostMapping("/getUserWithoutLogin")
+    public ApiResult<?> getUserWithoutLogin(@RequestBody User user) {
+        if (user.getAuthCode() == null || !user.getAuthCode().equals("1700083"))
+            return fail("参数错误");
+        return success(userService.getByIdRel(user.getUserId()));
+    }
+
     @PreAuthorize("hasAuthority('sys:user:list')")
     @OperationLog
     @ApiOperation("统计用户余额")
diff --git a/src/main/java/com/gxwebsoft/common/system/entity/User.java b/src/main/java/com/gxwebsoft/common/system/entity/User.java
index a128142..a3e5514 100644
--- a/src/main/java/com/gxwebsoft/common/system/entity/User.java
+++ b/src/main/java/com/gxwebsoft/common/system/entity/User.java
@@ -309,6 +309,10 @@ public class User implements UserDetails {
     @TableField(exist = false)
     private String phoneLoginCode;
 
+    @ApiModelProperty("校验码")
+    @TableField(exist = false)
+    private String authCode;
+
 //    @ApiModelProperty("企业信息")
 //    @TableField(exist = false)
 //    private Company companyInfo;