@@ -26,7 +26,7 @@ public class ResourceServerConfig extends ResourceServerConfigurerAdapter {
public void configure(HttpSecurity http) throws Exception {
http.authorizeRequests()
.antMatchers("/v2/api-docs", "/su/**", "/student/apply", "/examRegistration/ocr", "/examOrder/paymentResult",
- "/examOrder/notify","/examinationBasic/getInfo")
+ "/examOrder/notify","/examinationBasic/getInfo","/examOrder/executePayment")
.permitAll()
.anyRequest().authenticated().and().csrf().disable().exceptionHandling().accessDeniedHandler(baseAccessDeniedHandler)
.authenticationEntryPoint(baseAuthenticationEntryPoint).and();