update

src/main/java/com/yaoyuan/jiscuss/config/WebSecurityConfig.java

@@ -98,7 +98,8 @@ public class WebSecurityConfig {
         http.authorizeHttpRequests(auth -> {
             // Publicly accessible
             auth.requestMatchers(
-                    "/login/**", "/initUserData",
+                "/login/**", "/register", "/registerDo", "/initUserData",
+                    "/", "/main", "/index", "/getdiscussionsbyid",
                     // SpringDoc OpenAPI UI and spec endpoint (developer tools, no sensitive data)
                     "/swagger-ui/**", "/swagger-ui.html", "/v3/api-docs/**"
             ).permitAll();

src/main/java/com/yaoyuan/jiscuss/controller/api/RestUserController.java

@@ -73,6 +73,3 @@ public class RestUserController {
         return usersService.getAllList();
     }
 }
-
-
-}

src/main/resources/application-h2.yml

@@ -5,9 +5,10 @@
 spring:
   jpa:
     show-sql: true
-    # Flyway owns DDL; Hibernate only validates existing schema
+    # Flyway owns DDL. Disable Hibernate validation in H2 because H2 reports
+    # some MySQL-compatible legacy column types differently from MySQL/Hibernate.
     hibernate:
-      ddl-auto: validate
+      ddl-auto: none
     # H2 uses the same SQL dialect as MySQL in MySQL compatibility mode
 
   # H2 console — enabled in dev ONLY.
@@ -22,7 +23,8 @@ spring:
         web-allow-others: false
 
   datasource:
-    url: jdbc:h2:~/testjiscuss;MODE=MySQL;NON_KEYWORDS=VALUE
+    # H2 2.x reserves USER/VALUE; keep them usable for the legacy schema names.
+    url: jdbc:h2:~/testjiscuss;MODE=MySQL;NON_KEYWORDS=VALUE,USER
     username: sa
     password:
     driver-class-name: org.h2.Driver

src/main/resources/db/migration/V3__reset_seed_passwords.sql

@@ -0,0 +1,7 @@
+-- Reset development seed account passwords to a known BCrypt value.
+-- Plaintext password for both seeded accounts: 123456
+-- Do not use these credentials in production.
+
+UPDATE user
+SET password = '$2a$10$R4prDK/CfI0Hjrcz5dS8cOHClOIHIHlk8SoGmVY1iGWYSPxBGo7nm'
+WHERE username IN ('admin', 'test');