diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6aebfd23..ea41f165 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@
  * Fix `UPDATE` statement get user name from `SecurityContextHolder` error
  * Case order by format from lower hyphen to upper underscore
  * Fix mybatis flex order query error
+ * Fix `Spring Boot Admin` 401 error
 
 ### Optimization
 
diff --git a/tang-framework/pom.xml b/tang-framework/pom.xml
index d5f03c1b..a95b41cb 100755
--- a/tang-framework/pom.xml
+++ b/tang-framework/pom.xml
@@ -40,18 +40,18 @@
         </dependency>
 
         <dependency>
-            <groupId>org.mybatis</groupId>
-            <artifactId>mybatis</artifactId>
+            <groupId>de.codecentric</groupId>
+            <artifactId>spring-boot-admin-starter-server</artifactId>
         </dependency>
 
         <dependency>
             <groupId>de.codecentric</groupId>
-            <artifactId>spring-boot-admin-server</artifactId>
+            <artifactId>spring-boot-admin-starter-client</artifactId>
         </dependency>
 
         <dependency>
-            <groupId>de.codecentric</groupId>
-            <artifactId>spring-boot-admin-client</artifactId>
+            <groupId>org.mybatis</groupId>
+            <artifactId>mybatis</artifactId>
         </dependency>
 
         <dependency>
diff --git a/tang-framework/src/main/java/com/tang/framework/config/SecurityConfig.java b/tang-framework/src/main/java/com/tang/framework/config/SecurityConfig.java
index a9b0e8bb..0170cbd0 100644
--- a/tang-framework/src/main/java/com/tang/framework/config/SecurityConfig.java
+++ b/tang-framework/src/main/java/com/tang/framework/config/SecurityConfig.java
@@ -59,7 +59,7 @@ public SecurityFilterChain securityFilterChain(HttpSecurity httpSecurity, Authen
                 .requestMatchers("/uploads/**").permitAll()
                 .requestMatchers("/captcha/**").permitAll()
                 .requestMatchers("/druid/**").permitAll()
-                .requestMatchers("/actuator/**", "/admin/applications").permitAll()
+                .requestMatchers("/actuator/**", "/admin", "/admin/applications", "/admin/instances/**", "/admin/variables.css", "/admin/sba-settings.js").permitAll()
                 .anyRequest().authenticated()
             )
             .headers(headers -> headers.frameOptions(options -> options.disable()))