backend/src/main/java/com/tourguide/security/JwtAuthenticationFilter.java
@@ -82,6 +82,13 @@ } } @Override protected boolean shouldNotFilter(HttpServletRequest request) { String uri = request.getRequestURI(); return uri.startsWith("/base/dougong/") || uri.startsWith("/api/base/dougong/") || "/base/dougong".equals(uri) || "/api/base/dougong".equals(uri); } /** 根据 Token 端类型读取对应用户表,任何端都不会回退查询其他用户表。 */ private AppUserPrincipal loadPrincipal(TokenPayload payload, String requestUri) { if (payload.getClientType() == ClientType.ADMIN) {