backend/src/main/java/com/tourguide/config/SecurityConfig.java
@@ -51,6 +51,7 @@ "/api/guide/auth/login", "/api/guide/auth/password-login", "/api/guide/auth/sms-code", "/api/health").permitAll() .antMatchers("/api/guide/registration/**").permitAll() .antMatchers("/base/dougong/**").permitAll() .antMatchers(HttpMethod.GET, "/uploads/avatars/**").permitAll() .antMatchers("/uploads/guide-applications/**").hasRole("ADMIN") .antMatchers(HttpMethod.GET, "/api/mini/scenic-spots", "/api/mini/scenic-spots/**").permitAll()