From 076cd0fcf9c5943b4c62deff1578fa0f5a20b83b Mon Sep 17 00:00:00 2001
From: long <452591453@qq.com>
Date: Wed, 20 May 2026 17:13:26 +0800
Subject: [PATCH] fix: add changePassword to notNeedLogin for asset token auth

---
 server/app/api/controller/asset/AssetAppController.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/app/api/controller/asset/AssetAppController.php b/server/app/api/controller/asset/AssetAppController.php
index ed1ba862..31c5fab2 100644
--- a/server/app/api/controller/asset/AssetAppController.php
+++ b/server/app/api/controller/asset/AssetAppController.php
@@ -9,8 +9,8 @@ use think\facade\Db;
 
 class AssetAppController extends BaseApiController
 {
-    // 免登录验证的接口
-    public array $notNeedLogin = ['login', 'getResourceList'];
+    // 免登录验证的接口（使用独立 asset_token 体系，在方法内自行校验）
+    public array $notNeedLogin = ['login', 'getResourceList', 'changePassword'];
 
     /**
      * @notes 小程序端登录