diff --git a/src/main/java/com/alist/api/config/SecurityConfig.java b/src/main/java/com/alist/api/config/SecurityConfig.java
index 407f958..858465f 100644
--- a/src/main/java/com/alist/api/config/SecurityConfig.java
+++ b/src/main/java/com/alist/api/config/SecurityConfig.java
@@ -61,7 +61,7 @@ public class SecurityConfig {
 				.authorizeHttpRequests(auth -> auth
 						.requestMatchers(
 								"/admin/auth/**"
-								, "/admin/user/signup"
+								, "/admin/user/add"
 						).permitAll()
 						.anyRequest().hasRole("ADMIN")
 				)
@@ -86,8 +86,8 @@ public class SecurityConfig {
 								, "/actuator/health"
 								, "/sso/**"
 								, "/auth/**"
-								, "/user/signup"
-								, "/user/migrationUserList"
+								, "/user/add"
+								, "/user/migration/list"
 								, "/tusFiles/tusHook"
 								, "/tusFiles/uploadAuth"
 								, "/file/**"