diff --git a/src/main/java/com/senmesh/security/config/WebSecurityConfigurer.java b/src/main/java/com/senmesh/security/config/WebSecurityConfigurer.java
index 6e1b2bd..18c5e91 100644
--- a/src/main/java/com/senmesh/security/config/WebSecurityConfigurer.java
+++ b/src/main/java/com/senmesh/security/config/WebSecurityConfigurer.java
@@ -151,6 +151,8 @@ public class WebSecurityConfigurer extends WebSecurityConfigurerAdapter {
 
     // 禁用CSRF
 //    http.csrf().disable();
+    http.csrf(c -> c.ignoringAntMatchers("/login"))  // 登录接口免 CSRF
+    ;
     http.headers().frameOptions().deny();
     http.headers().xssProtection().block(true);
     http.headers().contentTypeOptions();