。

src/main/java/com/izouma/nineth/security/WebSecurityConfig.java

@@ -185,6 +185,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers("/metaResources/getLikeNum/**").permitAll()
                 .antMatchers("/metaProblem/findAll").permitAll()
                 .antMatchers("/metaQuestion/queryByApplication/**").permitAll()
+                .antMatchers("/metaObjectMove/*/queryCoordinate").permitAll()
                 // all other requests need to be authenticated
                 .anyRequest().authenticated().and()
                 // make sure we use stateless session; session won't be used to