From 87e20c31a95eeab9818c5e29b2a198870f9e3b09 Mon Sep 17 00:00:00 2001
From: Zhou Weidong <502333560@qq.com>
Date: Fri, 23 Oct 2026 12:34:13 +0800
Subject: [PATCH] =?UTF-8?q?feat(security):=20=E5=85=81=E8=AE=B8=E5=8C=BF?=
=?UTF-8?q?=E5=90=8D=E6=90=9C=E7=B4=A2=E4=B8=8E=E6=89=93=E5=BC=80=E5=8D=8F?=
=?UTF-8?q?=E8=AE=AE=E9=A1=B5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
---
.../com/fruitshorts/app/controller/AppSearchController.java | 2 +-
.../com/fruitshorts/framework/security/SecurityConfig.java | 4 ++++
2 files changed, 5 insertions(+), 1 deletion(-)
diff --git a/fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppSearchController.java b/fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppSearchController.java
index ebb9a93..e37ff47 100644
--- a/fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppSearchController.java
+++ b/fruitshorts-app-api/src/main/java/com/fruitshorts/app/controller/AppSearchController.java
@@ -14,7 +14,7 @@ import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RequestParam;
import org.springframework.web.bind.annotation.RestController;
-/** 客户端搜索：按标题或简介模糊匹配已上线短剧。 */
+/** 客户端搜索：按标题或简介模糊匹配已上线短剧。不需要登录。 */
@Tag(name = "客户端-搜索")
@RestController
@RequestMapping("/app")
diff --git a/fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/SecurityConfig.java b/fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/SecurityConfig.java
index e9370e2..1c1f523 100644
--- a/fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/SecurityConfig.java
+++ b/fruitshorts-framework/src/main/java/com/fruitshorts/framework/security/SecurityConfig.java
@@ -40,11 +40,15 @@ public class SecurityConfig {
"/app/categories/**",
"/app/banners/**",
"/app/dramas/**",
+ "/app/search",
"/app/episodes/*/play",
"/app/config/**",
/* 启动配置与公告：客户端登录前就要拿（POST /app/creator/apply 等仍要登录） */
"/app/config",
"/app/notices",
+ /* 服务条款与隐私协议：登录前就要能打开，按语言返回 HTML */
+ "/privacy/**",
+ "/terms/**",
/* 埋点上报：游客浏览也要记录，匿名可访问 */
"/app/events",
/* 媒资：封面与视频用 ![]()
/