快速问答调整

backend-java/src/main/java/com/pharmacopoeia/security/JwtAuthFilter.java

@@ -26,7 +26,7 @@ public class JwtAuthFilter extends OncePerRequestFilter {
     private static final Set<String> PUBLIC_PREFIXES = Set.of(
             "/health",
             "/api/v1/auth/",
-            "/api/v1/quick-asks",
+            "/api/v1/yaodian/",
             "/static/",
             "/favicon.ico"
     );

backend-java/src/main/java/com/pharmacopoeia/security/SecurityConfig.java

@@ -36,18 +36,13 @@ public class SecurityConfig {
                 .csrf(csrf -> csrf.disable())
                 .sessionManagement(sm -> sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS));
 
-        if (authProperties.isEnabled()) {
+
             // 生产模式：所有 /api/** 需要鉴权，公开路径仅限登录和静态资源
-            http.authorizeHttpRequests(auth -> auth
-                    .requestMatchers("/health", "/api/v1/auth/**", "/api/v1/quick-asks").permitAll()
-                    .requestMatchers("/static/**", "/").permitAll()
-                    .requestMatchers("/api/**").authenticated()
-                    .anyRequest().permitAll()
-            );
-        } else {
-            // 开发模式：全部放行
-            http.authorizeHttpRequests(auth -> auth.anyRequest().permitAll());
-        }
+        http.authorizeHttpRequests(auth -> auth
+                .requestMatchers("/health", "/api/v1/auth/**", "/api/v1/yaodian/**").permitAll()
+                .requestMatchers("/static/**", "/").permitAll()
+                .requestMatchers("/api/**").authenticated()
+                .anyRequest().permitAll());
 
         http.addFilterBefore(rateLimitFilter, UsernamePasswordAuthenticationFilter.class);
         http.addFilterBefore(jwtAuthFilter, UsernamePasswordAuthenticationFilter.class);