diff --git a/sdk/api/api-permissions/src/main/java/io/dataease/api/permissions/login/api/LoginApi.java b/sdk/api/api-permissions/src/main/java/io/dataease/api/permissions/login/api/LoginApi.java
index 820add62e8..417174a4d3 100644
--- a/sdk/api/api-permissions/src/main/java/io/dataease/api/permissions/login/api/LoginApi.java
+++ b/sdk/api/api-permissions/src/main/java/io/dataease/api/permissions/login/api/LoginApi.java
@@ -6,6 +6,7 @@ import com.github.xiaoymin.knife4j.annotations.ApiSupport;
 import io.dataease.api.permissions.login.dto.MfaLoginDTO;
 import io.dataease.api.permissions.login.dto.PwdLoginDTO;
 import io.dataease.api.permissions.login.vo.MfaQrVO;
+import io.dataease.api.permissions.user.dto.ModifyPwdRequest;
 import io.dataease.auth.vo.TokenVO;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.tags.Tag;
@@ -53,4 +54,7 @@ public interface LoginApi {
     @PostMapping("/mfa/login")
     TokenVO mfaLogin(@RequestBody MfaLoginDTO dto);
 
+    @Operation(summary = "修改无效密码", hidden = true)
+    @PostMapping("/login/modifyInvalidPwd")
+    void modifyInvalidPwd(@RequestBody ModifyPwdRequest request);
 }
diff --git a/sdk/common/src/main/java/io/dataease/utils/WhitelistUtils.java b/sdk/common/src/main/java/io/dataease/utils/WhitelistUtils.java
index 68da28d329..08f38a370b 100644
--- a/sdk/common/src/main/java/io/dataease/utils/WhitelistUtils.java
+++ b/sdk/common/src/main/java/io/dataease/utils/WhitelistUtils.java
@@ -49,7 +49,7 @@ public class WhitelistUtils {
             "/sysParameter/defaultLogin",
             "/embedded/initIframe",
             "/sysParameter/i18nOptions",
-            "/user/modifyPwd",
+            "/login/modifyInvalidPwd",
             "/");
 
     public static boolean match(String requestURI) {