diff --git a/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinAgencyFormDTO.java b/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinAgencyFormDTO.java
index 5e166ac342..0403bf52b1 100644
--- a/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinAgencyFormDTO.java
+++ b/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinAgencyFormDTO.java
@@ -17,12 +17,6 @@ public class StaffSinAgencyFormDTO implements Serializable {
     //后端自己看
     public interface StaffSinAgency{}
 
-    /**
-     * appId+customerId+时间戳加密secret
-     */
-//    @NotBlank(message = "secret不能为空",groups = {StaffSinDept.class})
-    private String accessToken;
-
     /**
      * 机关Id
      */
diff --git a/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinDeptFormDTO.java b/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinDeptFormDTO.java
index b66de79686..3e69297c27 100644
--- a/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinDeptFormDTO.java
+++ b/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinDeptFormDTO.java
@@ -17,12 +17,6 @@ public class StaffSinDeptFormDTO implements Serializable {
     //后端自己看
     public interface StaffSinDept{}
 
-    /**
-     * appId+customerId+时间戳加密secret
-     */
-//    @NotBlank(message = "secret不能为空",groups = {StaffSinDept.class})
-    private String accessToken;
-
     /**
      * 部门Id
      */
diff --git a/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinGridFormDTO.java b/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinGridFormDTO.java
index a694dfddb1..8b93d60979 100644
--- a/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinGridFormDTO.java
+++ b/epmet-module/epmet-ext/epmet-ext-client/src/main/java/com/epmet/dto/form/StaffSinGridFormDTO.java
@@ -18,12 +18,6 @@ public class StaffSinGridFormDTO implements Serializable {
     //后端自己看
     public interface StaffSinGrid{}
 
-    /**
-     * appId+customerId+时间戳加密secret
-     */
-//    @NotBlank(message = "secret不能为空",groups = {StaffSinGrid.class})
-    private String accessToken;
-
     /**
      * 网格Id
      */
diff --git a/epmet-module/epmet-ext/epmet-ext-server/src/main/java/com/epmet/controller/OpenUpController.java b/epmet-module/epmet-ext/epmet-ext-server/src/main/java/com/epmet/controller/OpenUpController.java
index 1f29c98390..b5849f78dc 100644
--- a/epmet-module/epmet-ext/epmet-ext-server/src/main/java/com/epmet/controller/OpenUpController.java
+++ b/epmet-module/epmet-ext/epmet-ext-server/src/main/java/com/epmet/controller/OpenUpController.java
@@ -1,5 +1,6 @@
 package com.epmet.controller;
 
+import com.epmet.commons.extappauth.annotation.ExternalAppRequestAuth;
 import com.epmet.commons.tools.utils.Result;
 import com.epmet.commons.tools.validator.ValidatorUtils;
 import com.epmet.dto.form.*;
@@ -33,6 +34,7 @@ public class OpenUpController {
      * @author zxc
      * @date 2020/8/13 9:42 上午
      */
+    @ExternalAppRequestAuth
     @PostMapping("staffsingrid")
     public Result<List<StaffSinGridResultDTO>> staffSinGrid(@RequestBody StaffSinGridFormDTO formDTO){
         ValidatorUtils.validateEntity(formDTO, StaffSinGridFormDTO.StaffSinGrid.class);
@@ -45,6 +47,7 @@ public class OpenUpController {
      * @author zxc
      * @date 2020/8/13 9:51 上午
      */
+    @ExternalAppRequestAuth
     @PostMapping("staffsindept")
     public Result<List<StaffSinDeptResultDTO>> staffSinDept(@RequestBody StaffSinDeptFormDTO formDTO){
         ValidatorUtils.validateEntity(formDTO, StaffSinDeptFormDTO.StaffSinDept.class);
@@ -57,6 +60,7 @@ public class OpenUpController {
      * @author zxc
      * @date 2020/8/17 9:59 上午
      */
+    @ExternalAppRequestAuth
     @PostMapping("staffsinagency")
     public Result<List<StaffSinAgencyResultDTO>> staffSinAgency(@RequestBody StaffSinAgencyFormDTO formDTO){
         ValidatorUtils.validateEntity(formDTO, StaffSinAgencyFormDTO.StaffSinAgency.class);