增加短信登录

huimv-employment/fe-api/src/main/java/com/huimv/employment/security/JwtAuthFilter.java

@@ -21,7 +21,7 @@ import java.io.IOException;
 import java.nio.charset.StandardCharsets;
 
 /**
- * JWT 鉴权过滤器：保护 /api/v1/mp/** 接口（auth 匿名除外）。
+ * JWT 鉴权过滤器：保护 /api/v1/mp/** 接口（auth、health 等匿名路径除外）。
  */
 @Component
 @Order(Ordered.HIGHEST_PRECEDENCE + 20)
@@ -29,6 +29,12 @@ public class JwtAuthFilter extends OncePerRequestFilter {
 
     private static final AntPathMatcher PATH_MATCHER = new AntPathMatcher();
 
+    /** 无需 JWT 的 mp 接口路径 */
+    private static final String[] ANONYMOUS_PATTERNS = {
+            "/api/v1/mp/auth/**",
+            "/api/v1/mp/health"
+    };
+
     private final JwtTokenService jwtTokenService;
     private final ObjectMapper objectMapper;
 
@@ -43,7 +49,12 @@ public class JwtAuthFilter extends OncePerRequestFilter {
         if (!path.startsWith("/api/v1/mp/")) {
             return true;
         }
-        return PATH_MATCHER.match("/api/v1/mp/auth/**", path);
+        for (String pattern : ANONYMOUS_PATTERNS) {
+            if (PATH_MATCHER.match(pattern, path)) {
+                return true;
+            }
+        }
+        return false;
     }
 
     @Override