Merge remote-tracking branch 'origin/dev' into prod

# Conflicts:
#	yd-gateway/src/main/java/com/yd/gateway/config/GatewayJwtAuthFilterConfig.java

yd-gateway/src/main/java/com/yd/gateway/config/GatewayJwtAuthFilterConfig.java

@@ -93,17 +93,47 @@ public class GatewayJwtAuthFilterConfig {
         return false;
     }
 
+    private boolean isWhitelist(String path) {
+        // 定义所有白名单路径模式（Ant风格）
+        String[] whitelistPatterns = {
+                "/auth/**",
+                "/swagger-ui/**",
+                "/v3/api-docs/**",
+                "/doc.html",
+                "/webjars/**",
+                "/v3/api-docs/*",
+                "/swagger-resources/*",
+                "/swagger-ui/*",
+                "/auth/v2/api-docs/*",
+                "/favicon.ico",
+                "/user/api/v3/api-docs/**",
+                "/insurance/base/api/v3/api-docs/**",
+                "/csf/api/v3/api-docs/**",
+                "/auth/v3/api-docs/**",
+                // 关键：匹配任意层级下的 ossFile/list
+                "/**/ossFile/list"
+                // 如果路径固定，也可以直接加完整路径
+//                "/api/oss/api/ossFile/list"
+        };
+
+        for (String pattern : whitelistPatterns) {
+            if (matcher.match(pattern, path)) {
+                return true;
+            }
+        }
+        return false;
+    }
+
     /**
      * 判断路径是否在白名单中（无需认证）
      */
-    private boolean isWhitelist(String path) {
-        // 白名单路径：与SecurityWebFilterChain中的配置保持一致
-        return path.startsWith("/auth/")
-                || path.startsWith("/ossFile/list")
-                || path.startsWith("/swagger-ui/")
-                || path.startsWith("/v3/api-docs/")
-                || isKnife4jWhitelist(path);
-    }
+//    private boolean isWhitelist(String path) {
+//        // 白名单路径：与SecurityWebFilterChain中的配置保持一致
+//        return path.startsWith("/auth/")
+//                || path.startsWith("/swagger-ui/")
+//                || path.startsWith("/v3/api-docs/")
+//                || isKnife4jWhitelist(path);
+//    }
 
     /**
      * 设置401响应