diff --git a/src/main/kotlin/top/fatweb/api/config/SecurityConfig.kt b/src/main/kotlin/top/fatweb/api/config/SecurityConfig.kt
index 4ab79bc..017f2d4 100644
--- a/src/main/kotlin/top/fatweb/api/config/SecurityConfig.kt
+++ b/src/main/kotlin/top/fatweb/api/config/SecurityConfig.kt
@@ -58,14 +58,14 @@ class SecurityConfig(
             authorizeHttpRequests
                 // Allow anonymous access
                 .requestMatchers(
-                    "/login",
                     "/error/thrown",
                     "/doc.html",
                     "/swagger-ui/**",
                     "/webjars/**",
                     "/v3/**",
                     "/swagger-ui.html",
-                    "/favicon.ico"
+                    "/favicon.ico",
+                    "/login",
                 ).anonymous()
                 // Authentication required
                 .anyRequest().authenticated()