优化

gateway/src/main/resources/application.yml

@@ -164,6 +164,7 @@ baiyue:
       - /api/auth/login
       - /api/auth/register
       - /api/auth/refresh
+      - /api/auth/impersonations/exchange
       - /openapi/v1/inbound-measurements/**
       - /actuator/health
       - /swagger-ui/**

gateway/src/test/java/com/baiyue/gateway/config/ImpersonationExchangeSecurityContractTest.java

@@ -0,0 +1,20 @@
+package com.baiyue.gateway.config;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.core.io.ClassPathResource;
+
+import java.nio.charset.StandardCharsets;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+class ImpersonationExchangeSecurityContractTest {
+    @Test
+    void permitsAnonymousImpersonationCodeExchangeAtTheGateway() throws Exception {
+        String yaml = new ClassPathResource("application.yml")
+            .getContentAsString(StandardCharsets.UTF_8);
+
+        assertThat(yaml)
+            .contains("permit-paths:")
+            .contains("- /api/auth/impersonations/exchange");
+    }
+}