backend/src/main/java/com/tourguide/config/SecurityConfig.java
@@ -53,6 +53,7 @@ .antMatchers("/api/guide/registration/**").permitAll() .antMatchers("/base/dougong/**", "/api/base/dougong/**").permitAll() .antMatchers(HttpMethod.GET, "/uploads/avatars/**").permitAll() .antMatchers(HttpMethod.GET, "/uploads/review-images/**").permitAll() .antMatchers("/uploads/guide-applications/**") .hasAnyAuthority("PERM_GUIDE_LIST_VIEW", "PERM_GUIDE_AUDIT_VIEW") .antMatchers(HttpMethod.GET, "/api/mini/scenic-spots", "/api/mini/scenic-spots/**").permitAll()