diff --git a/server/app/api/controller/asset/AssetAppController.php b/server/app/api/controller/asset/AssetAppController.php
index ed1ba862..31c5fab2 100644
--- a/server/app/api/controller/asset/AssetAppController.php
+++ b/server/app/api/controller/asset/AssetAppController.php
@@ -9,8 +9,8 @@ use think\facade\Db;
 
 class AssetAppController extends BaseApiController
 {
-    // 免登录验证的接口
-    public array $notNeedLogin = ['login', 'getResourceList'];
+    // 免登录验证的接口（使用独立 asset_token 体系，在方法内自行校验）
+    public array $notNeedLogin = ['login', 'getResourceList', 'changePassword'];
 
     /**
      * @notes 小程序端登录