framework/spring-boot-starter-web/src/main/java/cd/casic/framework/web/core/filter/ApiRequestFilter.java

@@ -19,8 +19,9 @@ public abstract class ApiRequestFilter extends OncePerRequestFilter {
     @Override
     protected boolean shouldNotFilter(HttpServletRequest request) {
         // 只过滤 API 请求的地址
-        return !StrUtil.startWithAny(request.getRequestURI(), webProperties.getAdminApi().getPrefix(),
-                webProperties.getAppApi().getPrefix());
+//        return !StrUtil.startWithAny(request.getRequestURI(), webProperties.getAdminApi().getPrefix(),
+//                webProperties.getAppApi().getPrefix());
+        return true;
     }
 
 }

ops-server/src/main/java/cd/casic/server/controller/PipelineController.java

@@ -6,7 +6,6 @@ import cd.casic.ci.common.pipeline.resp.pipeline.PipelineResp;
 import cd.casic.framework.commons.dataobject.User;
 import cd.casic.framework.commons.pojo.CommonResult;
 import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
-import jakarta.annotation.security.PermitAll;
 import jakarta.validation.Valid;
 import org.jetbrains.annotations.NotNull;
 import org.springframework.web.bind.annotation.PostMapping;
@@ -27,7 +26,7 @@ import java.util.List;
 @RestController
 @RequestMapping("/pipeline")
 public class PipelineController {
-    @PermitAll
+
     @PostMapping(path="/createPipeline")
     public CommonResult<String> createPipeline(@RequestBody @NotNull @Valid PipelineReq pipelineReq){