push

yd-auth-core/src/main/java/com/yd/auth/core/security/JwtAuthenticationFilter.java

@@ -52,6 +52,13 @@ public class JwtAuthenticationFilter extends OncePerRequestFilter {
                                     HttpServletResponse response,
                                     FilterChain filterChain) throws ServletException, IOException {
 
+        String requestUri = request.getRequestURI();
+        // 放行 WebSocket 握手请求（必须加！）
+        if (requestUri.startsWith("/communication/api/ws/")) {
+            filterChain.doFilter(request, response);
+            return;
+        }
+
         // 1. 从HTTP请求中解析JWT令牌（通常从Authorization头获取）
         String token = resolveToken(request);
         log.info("从HTTP请求中解析JWT令牌（通常从Authorization头获取）:{}",token);