From 6bc1e19e5b314d340364879c12e7d5c9a0937e8f Mon Sep 17 00:00:00 2001
From: litianxiang <litianxiangxtt@163.com>
Date: Tue, 2 Jun 2026 10:29:05 +0800
Subject: [PATCH] fegin

---
 .../module/listing/controller/ListingMallController.java      | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/main/java/com/aida/seller/module/listing/controller/ListingMallController.java b/src/main/java/com/aida/seller/module/listing/controller/ListingMallController.java
index 1266e6b..0eb8ae1 100644
--- a/src/main/java/com/aida/seller/module/listing/controller/ListingMallController.java
+++ b/src/main/java/com/aida/seller/module/listing/controller/ListingMallController.java
@@ -1,5 +1,6 @@
 package com.aida.seller.module.listing.controller;
 
+import com.aida.seller.common.annotation.InternalOnly;
 import com.aida.seller.common.result.PageResponse;
 import com.aida.seller.common.result.Response;
 import com.aida.seller.module.listing.dto.ListingMallQueryDTO;
@@ -28,6 +29,7 @@ public class ListingMallController {
 
     @Operation(summary = "商城首页商品分页列表", description = "")
     @PostMapping("/mall")
+    @InternalOnly
     public Response<PageResponse<ListingMallVO>> getMallListings(
             @RequestBody ListingMallQueryDTO dto) {
         IPage<ListingMallVO> page = listingMallService.getMallListings(dto);
@@ -36,6 +38,7 @@ public class ListingMallController {
 
     @Operation(summary = "商品详情（商城详情页）", description = "关联图片与店铺信息")
     @GetMapping("/mall/detail")
+    @InternalOnly
     public Response<ListingDetailVO> getListingDetail(
             @Parameter(description = "商品ID") @RequestParam Long id) {
         ListingDetailVO detail = listingMallService.getListingDetail(id);
@@ -52,6 +55,7 @@ public class ListingMallController {
 
     @Operation(summary = "获取商品 listing 图片 URL 列表", description = "返回指定商品ID的 listing 分类图片 URL 列表（仅返回已购买该商品的用户）")
     @GetMapping("/mall/main-product/urls")
+    @InternalOnly
     public Response<List<String>> getListingUrls(
             @Parameter(description = "商品ID") @RequestParam Long id,
             @Parameter(description = "买家ID") @RequestParam Long buyerId) {