回调白名单

src/main/resources/application-dev.yml

@@ -42,6 +42,7 @@ security:
     - /maintain/asset/withdraw/notify #提现回调
     - /maintain/asset/transfer/notify #转账回调
     - /maintain/order/notify          #支付回调
+    - /maintain/order/refund/notify   #退款回调
   oauth:
     scoped: true
     secret: oauth.token.secret@chelvc!@#2023

src/main/resources/application-pre.yml

@@ -35,7 +35,14 @@ nacos:
     server-addr: 127.0.0.1:6848
 
 security:
-  ignores: /user/**,/vehicle/**
+  ignores:
+    - /user/**
+    - /vehicle/**
+    - /maintain/merchant/apply/notify #商户入驻回调
+    - /maintain/asset/withdraw/notify #提现回调
+    - /maintain/asset/transfer/notify #转账回调
+    - /maintain/order/notify          #支付回调
+    - /maintain/order/refund/notify   #退款回调
   oauth:
     scoped: true
     secret: oauth.token.secret@chelvc!@#2023

src/main/resources/application-prod.yml

@@ -35,7 +35,14 @@ nacos:
     server-addr: 127.0.0.1:6848
 
 security:
-  ignores: /user/**,/vehicle/**
+  ignores:
+    - /user/**
+    - /vehicle/**
+    - /maintain/merchant/apply/notify #商户入驻回调
+    - /maintain/asset/withdraw/notify #提现回调
+    - /maintain/asset/transfer/notify #转账回调
+    - /maintain/order/notify          #支付回调
+    - /maintain/order/refund/notify   #退款回调
   oauth:
     scoped: true
     secret: oauth.token.secret@chelvc!@#2023

src/main/resources/application-test.yml

@@ -35,7 +35,14 @@ nacos:
     server-addr: 127.0.0.1:6848
 
 security:
-  ignores: /user/**,/vehicle/**
+  ignores:
+    - /user/**
+    - /vehicle/**
+    - /maintain/merchant/apply/notify #商户入驻回调
+    - /maintain/asset/withdraw/notify #提现回调
+    - /maintain/asset/transfer/notify #转账回调
+    - /maintain/order/notify          #支付回调
+    - /maintain/order/refund/notify   #退款回调
   oauth:
     scoped: true
     secret: oauth.token.secret@chelvc!@#2023