diff --git a/core/security/src/main/java/com/qihang/security/AuthenticationExceptionHandler.java b/core/security/src/main/java/com/qihang/security/AuthenticationExceptionHandler.java
index 44c8d7f8..f32c20b4 100644
--- a/core/security/src/main/java/com/qihang/security/AuthenticationExceptionHandler.java
+++ b/core/security/src/main/java/com/qihang/security/AuthenticationExceptionHandler.java
@@ -3,6 +3,7 @@ package com.qihang.security;
 import com.alibaba.fastjson2.JSON;
 
 import com.qihang.common.common.R;
+import com.qihang.common.enums.HttpStatus;
 import jakarta.servlet.ServletException;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
@@ -32,7 +33,7 @@ public class AuthenticationExceptionHandler implements AuthenticationEntryPoint
             if (message == null) {
                 message = "认证失败！";
             }
-            R res = R.error(500, message);
+            R res = R.error(HttpStatus.ERROR, message);
             writer = response.getWriter();
             writer.append(JSON.toJSONString(res));
         } catch (IOException e) {
diff --git a/core/security/src/main/java/com/qihang/security/JwtAuthenticationTokenFilter.java b/core/security/src/main/java/com/qihang/security/JwtAuthenticationTokenFilter.java
index c9fad827..959d549c 100644
--- a/core/security/src/main/java/com/qihang/security/JwtAuthenticationTokenFilter.java
+++ b/core/security/src/main/java/com/qihang/security/JwtAuthenticationTokenFilter.java
@@ -3,6 +3,7 @@ package com.qihang.security;
 
 import com.alibaba.fastjson2.JSON;
 import com.qihang.common.common.R;
+import com.qihang.common.enums.HttpStatus;
 import jakarta.servlet.FilterChain;
 import jakarta.servlet.ServletException;
 import jakarta.servlet.http.HttpServletRequest;
@@ -71,9 +72,9 @@ public class JwtAuthenticationTokenFilter extends OncePerRequestFilter
         PrintWriter writer = null;
         try {
             if (message == null) {
-                message = "403 Forbidden";
+                message = "401 Forbidden";
             }
-            R res = R.error(403, message);
+            R res = R.error(HttpStatus.UNAUTHORIZED, message);
             writer = response.getWriter();
             writer.append(JSON.toJSONString(res));
         } catch (IOException e) {