From 77440dc935fb08cf0d8f68ddda9812d9a9442ab1 Mon Sep 17 00:00:00 2001
From: zhouwentao <zwt13703@gmail.com>
Date: Fri, 19 Dec 2025 07:58:21 +0800
Subject: [PATCH] update

---
 .vscode/settings.json         |  5 ++++-
 Task4.md                      | 23 +++++++++++++++++++++++
 server/config/config.go       |  2 +-
 server/middleware/auth.go     |  1 +
 server/middleware/security.go |  1 +
 5 files changed, 30 insertions(+), 2 deletions(-)
 create mode 100644 Task4.md

diff --git a/.vscode/settings.json b/.vscode/settings.json
index 5480842..62ef4f0 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -1,3 +1,6 @@
 {
-    "kiroAgent.configureMCP": "Disabled"
+    "kiroAgent.configureMCP": "Disabled",
+    "cSpell.words": [
+        "Cognitio"
+    ]
 }
\ No newline at end of file
diff --git a/Task4.md b/Task4.md
new file mode 100644
index 0000000..2bd2ff5
--- /dev/null
+++ b/Task4.md
@@ -0,0 +1,23 @@
+我需要写一个接口，用来保存用户的成绩信息。POST格式。
+请求体：
+```json
+{
+    "CognitioPolyclinic": "文理分科",
+    "SubjectList": [
+        "科目1","科目2","科目3"
+    ],
+    "ProfessionalCategory": "专业方向",
+    "ProfessionalCategoryChildren": ["专业子级方向1", "专业子级方向2", "专业子级方向3"],
+    "ProfessionalCategoryChildrenScore": {
+        "专业子级方向1": "专业子级方向1成绩分",
+        "专业子级方向2": "专业子级方向2成绩分",
+        "专业子级方向3": "专业子级方向3成绩分",
+    },
+    "ProfessionalScore": "专业成绩分",
+    "CulturalScore": "文化成绩分",
+    "EnglishScore": "英语成绩分",
+    "ChineseScore": "语文成绩分",
+    "Province": "省份",
+}
+```
+帮我写一个接口，用来保存用户的成绩信息。POST格式。同时校验这些参数是否有效，这些都是必传值，不能为空。CognitioPolyclinic=文科/理科。SubjectList只能包含"地理"、"政治"、"历史"、"化学"、"生物"有且只能传两个值，关于成绩的值只能0-300。然后你写个插入到yx_user_score表的方法。
\ No newline at end of file
diff --git a/server/config/config.go b/server/config/config.go
index 3d365eb..a7ebdc1 100644
--- a/server/config/config.go
+++ b/server/config/config.go
@@ -11,7 +11,7 @@ var AppConfig = &appConfig{
 	},
 	// 安全配置
 	Security: SecurityConfig{
-		Enable:    true,              // 是否启用安全校验
+		Enable:    false,             // 是否启用安全校验
 		HeaderKey: "X-App-Sign",      // 请求头校验字段
 		SecretKey: "yts@2025#secure", // 签名密钥
 	},
diff --git a/server/middleware/auth.go b/server/middleware/auth.go
index 7f8e632..2ed4163 100644
--- a/server/middleware/auth.go
+++ b/server/middleware/auth.go
@@ -24,6 +24,7 @@ var whiteList = []string{
 	"/api/auth/login",
 	"/api/auth/register",
 	"/swagger/",
+	"/swagger/index.html",
 }
 
 // AuthMiddleware 登录鉴权中间件
diff --git a/server/middleware/security.go b/server/middleware/security.go
index c6baced..aede502 100644
--- a/server/middleware/security.go
+++ b/server/middleware/security.go
@@ -86,6 +86,7 @@ func generateSign(timestamp, secretKey string) string {
 // 安全校验白名单
 var securityWhitelist = []string{
 	"/swagger/",
+	"/swagger/index.html",
 }
 
 func isSecurityWhitelist(path string) bool {