From 6843418a8848dd73ed96a6f224d0dbc16ee13af5 Mon Sep 17 00:00:00 2001
From: chenqi <chen.qi@jin-group.cn>
Date: Sat, 20 Jun 2026 14:13:34 +0800
Subject: [PATCH] =?UTF-8?q?fix(security):=20=E6=B7=BB=E5=8A=A0=E7=A7=BB?=
 =?UTF-8?q?=E5=8A=A8=E7=AB=AFAPI=E5=88=B0=E5=AE=89=E5=85=A8=E7=99=BD?=
 =?UTF-8?q?=E5=90=8D=E5=8D=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../com/core/framework/config/SecurityConfig.java | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/healthlink-his-server/core-framework/src/main/java/com/core/framework/config/SecurityConfig.java b/healthlink-his-server/core-framework/src/main/java/com/core/framework/config/SecurityConfig.java
index 214086272..504278516 100755
--- a/healthlink-his-server/core-framework/src/main/java/com/core/framework/config/SecurityConfig.java
+++ b/healthlink-his-server/core-framework/src/main/java/com/core/framework/config/SecurityConfig.java
@@ -111,6 +111,21 @@ public class SecurityConfig {
                 .permitAll()
                 // 登录页租户列表，允许匿名访问
                 .requestMatchers("/system/tenant/all-active")
+                .permitAll()
+                // 移动端API，允许匿名访问
+                .requestMatchers("/patient-home-manage/**")
+                .permitAll()
+                .requestMatchers("/nurse-station/**")
+                .permitAll()
+                .requestMatchers("/vital-signs/**")
+                .permitAll()
+                .requestMatchers("/nursing-mobile/**")
+                .permitAll()
+                .requestMatchers("/nursing-record/**")
+                .permitAll()
+                .requestMatchers("/nursing-execution/**")
+                .permitAll()
+                .requestMatchers("/api/v1/nursing/**")
                 .permitAll()
                     // 除上面外的所有请求全部需要鉴权认证
                     .anyRequest().authenticated();