diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..29b636a
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+.idea
+*.iml
\ No newline at end of file
diff --git a/.idea/misc.xml b/.idea/misc.xml
index 9952cf4..b7503f2 100644
--- a/.idea/misc.xml
+++ b/.idea/misc.xml
@@ -8,7 +8,7 @@
       </list>
     </option>
   </component>
-  <component name="ProjectRootManager">
+  <component name="ProjectRootManager" version="2" languageLevel="JDK_17" default="true" project-jdk-name="17" project-jdk-type="JavaSDK">
     <output url="file://$PROJECT_DIR$/out" />
   </component>
 </project>
\ No newline at end of file
diff --git a/study-project-backend/src/main/java/com/example/config/SecurityConfiguration.java b/study-project-backend/src/main/java/com/example/config/SecurityConfiguration.java
index 0c76c4e..5564622 100644
--- a/study-project-backend/src/main/java/com/example/config/SecurityConfiguration.java
+++ b/study-project-backend/src/main/java/com/example/config/SecurityConfiguration.java
@@ -26,15 +26,16 @@ public class SecurityConfiguration {
                 .anyRequest().authenticated()
                 .and()
                 .formLogin()
-                .loginProcessingUrl("/api/auth/login")
-                .successHandler(this::onAuthenticationSuccess)
-                .failureHandler(this::onAuthenticationFailure)
+                .loginProcessingUrl("/api/auth/login")//登录页面
+                .successHandler(this::onAuthenticationSuccess)//登录成功返回
+                .failureHandler(this::onAuthenticationFailure)//登录失败返回
                 .and()
                 .logout()
                 .logoutUrl("api/auth/logout")
                 .and()
                 .csrf()
                 .disable()
+                //无权限返回
                 .exceptionHandling()
                 .authenticationEntryPoint(this::onAuthenticationFailure)
                 .and()