diff --git a/deploy/apisix/config.yaml b/deploy/apisix/config.yaml
index 1a4cd73..1dd5b38 100644
--- a/deploy/apisix/config.yaml
+++ b/deploy/apisix/config.yaml
@@ -31,6 +31,9 @@ deployment:
 # http层共享字典（仅http使用）
 nginx_config:
   lua_package_path: "/usr/local/apisix/?.lua;;"
+  http:
+    client_max_body_size: 128m
+    client_body_buffer_size: 2m
   lua_shared_dict:
     prometheus-metrics 10m
     prometheus-cache 10m
diff --git a/deploy/apisix/lua/auth.lua b/deploy/apisix/lua/auth.lua
index 98ab9eb..16863c0 100644
--- a/deploy/apisix/lua/auth.lua
+++ b/deploy/apisix/lua/auth.lua
@@ -16,10 +16,14 @@ function _M.access(conf, ctx)
         ["/api/v3/version"]     = true,
 
         ["/admin/v3/login"]     = true,
-        ["/admin/v3/refresh"] = true,
+        ["/admin/v3/refresh"]   = true,
 
-        ["/api/v3/express/sf"] = true,
-        ["/api/v3/express/jd"] = true,
+        ["/api/v3/express/sf"]  = true,
+        ["/api/v3/express/jd"]  = true,
+
+        ["/api/v3/version"]     = true,
+
+        ["/api/v3/chore/oss/upload"] = true,
     }
 
     local user_key = core.request.header(ctx, "authorization")