diff --git a/src/main/java/com/xkrs/common/config/WebSecurityConfig.java b/src/main/java/com/xkrs/common/config/WebSecurityConfig.java
index bd4b072..d33756b 100644
--- a/src/main/java/com/xkrs/common/config/WebSecurityConfig.java
+++ b/src/main/java/com/xkrs/common/config/WebSecurityConfig.java
@@ -40,6 +40,7 @@ class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers(HttpMethod.POST, "/api/login").permitAll()
                 // 所有 app 用户注册 的POST请求 都放行
                 .antMatchers(HttpMethod.POST, "/api/person-investigator/add").permitAll()
+                .antMatchers("/ws/asset").permitAll()
                 .antMatchers(HttpMethod.GET,"/api/user/booleanUserName").permitAll()
                 .antMatchers(HttpMethod.POST,"/insertFirePoint").permitAll()
                 .antMatchers(HttpMethod.POST,"/insertAppTask").permitAll()