From cbb1048e18e00fef4d035d3eb73836405b1f9054 Mon Sep 17 00:00:00 2001
From: figmar <figmar@yeah.net>
Date: Tue, 1 Sep 2026 19:45:41 +0800
Subject: [PATCH] =?UTF-8?q?docs:=20=E6=8E=92=E9=9A=9C=E8=A1=A8=E8=A1=A5?=
 =?UTF-8?q?=E5=85=85=20callback.html=20403=20=E6=9D=83=E9=99=90=E5=9D=91?=
 =?UTF-8?q?=EF=BC=88600=20=E7=83=A4=E8=BF=9B=E9=95=9C=E5=83=8F=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docs/CASDOOR_SSO_DEPLOYMENT-zh.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/CASDOOR_SSO_DEPLOYMENT-zh.md b/docs/CASDOOR_SSO_DEPLOYMENT-zh.md
index 5b2dccc..c129bbb 100644
--- a/docs/CASDOOR_SSO_DEPLOYMENT-zh.md
+++ b/docs/CASDOOR_SSO_DEPLOYMENT-zh.md
@@ -95,3 +95,4 @@ bash scripts/casdoor-sso/e2e-check.sh
 | grant-consent `Invalid application` | application 用了裸名 | 用 `admin/DataMate` |
 | authorize 返回 200 不跳转 | 正常（SPA 行为）；若脚本验证用 grant-consent | — |
 | `/sso/casdoor/config` `enabled:false` | `DEEPDATA_CASDOOR_ENABLED` 未注入 | 检查 .env + compose 变量名映射 |
+| `/sso/callback.html` 403（nginx permission denied） | 文件权限 600，nginx worker 非 root 读不到（构建把 600 烤进镜像） | `chmod 644 frontend/public/sso/callback.html` 后重建前端镜像 |