diff --git a/src/SimpleAdmin.Api/SimpleAdminApiModule.cs b/src/SimpleAdmin.Api/SimpleAdminApiModule.cs
index 9ae4d2c..bf93dc0 100644
--- a/src/SimpleAdmin.Api/SimpleAdminApiModule.cs
+++ b/src/SimpleAdmin.Api/SimpleAdminApiModule.cs
@@ -10,7 +10,9 @@ using Fake.AspNetCore.Swagger;
 using Fake.FeiShu;
 using Fake.Security.Claims;
 using Fake.Serilog;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.HttpOverrides;
+using Microsoft.AspNetCore.Mvc.Authorization;
 using Microsoft.Extensions.DependencyInjection;
 using Oms.Application;
 using Oms.SqlSugarCore;
@@ -115,6 +117,17 @@ public class SimpleAdminApiModule : FakeModule
         services.AddTransient<IException2ResponseConverter>(sp =>
             new ExceptionHandling.OmsException2ResponseConverter(
                 sp.GetRequiredService<DefaultException2ResponseConverter>()));
+        
+        // 全局授权配置：所有接口默认需要授权
+        services.AddMvc(options =>
+        {
+            var policy = new AuthorizationPolicyBuilder()
+                .RequireAuthenticatedUser()
+                .Build();
+            options.Filters.Add(new AuthorizeFilter(policy));
+        });
+        // 添加授权服务
+        services.AddAuthorization();
     }
 
     public override void ConfigureApplication(ApplicationConfigureContext context)