diff --git a/fastbee-framework/src/main/java/com/fastbee/framework/config/SecurityConfig.java b/fastbee-framework/src/main/java/com/fastbee/framework/config/SecurityConfig.java
index 66c1f2e..b644d92 100644
--- a/fastbee-framework/src/main/java/com/fastbee/framework/config/SecurityConfig.java
+++ b/fastbee-framework/src/main/java/com/fastbee/framework/config/SecurityConfig.java
@@ -129,7 +129,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
                 // dueros
                 .antMatchers("/dueros").permitAll()
                 //安防小板
-                .antMatchers("/iot/photos").permitAll()
+                .antMatchers("/iot/photos","/iot/photos/**").permitAll()
 
                 // 除上面外的所有请求全部需要鉴权认证
                 .anyRequest().authenticated()