feat: 开发鉴权配置

src/main/java/com/qqflow/engine/config/security/SecurityConfig.java

@@ -30,6 +30,7 @@ public class SecurityConfig {
                 .authorizeHttpRequests(auth -> auth
                         .requestMatchers("/auth/**").permitAll()
                         .requestMatchers("/webhook/**").permitAll()
+                        .requestMatchers("/open-api/**").permitAll()
                         .requestMatchers("/uploads/**").permitAll()
                         .requestMatchers(HttpMethod.OPTIONS).permitAll()
                         .requestMatchers("/doc.html", "/swagger-ui/**", "/v3/api-docs/**").permitAll()

src/main/java/com/qqflow/engine/domain/ewechat/controller/EnterpriseWechatCallbackController.java

@@ -18,7 +18,7 @@ import org.springframework.web.bind.annotation.*;
 @Tag(name = "企微回调接口")
 @RestController
 @RequiredArgsConstructor
-@RequestMapping("/api/open/enterprise-wechat/")
+@RequestMapping("/open-api/enterprise-wechat/")
 public class EnterpriseWechatCallbackController {
     private final EnterpriseWechatValidator enterpriseWechatValidator;
     private final EnterpriseWechatCallbackService enterpriseWechatCallbackService;