diff --git a/internal/router/router.go b/internal/router/router.go
index 6a774f7..ff7e65d 100755
--- a/internal/router/router.go
+++ b/internal/router/router.go
@@ -458,6 +458,10 @@ func NewHTTPMux(logger logger.CustomLogger, db mysql.Repo) (core.Mux, func(), er
 		// 公共工具
 		appPublicApiRouter.POST("/common/openid", commonHandler.GetOpenID())
 		appPublicApiRouter.GET("/config/public", commonHandler.GetPublicConfig())
+
+		// 商城浏览（无需登录）
+		appPublicApiRouter.GET("/store/items", appapi.NewStore(logger, db, userSvc).ListStoreItemsForApp())
+		appPublicApiRouter.GET("/product_categories", appapi.NewProductCategory(logger, db).ListProductCategoriesForApp())
 	}
 
 	// 公开接口路由组 (无需登录)
@@ -511,8 +515,6 @@ func NewHTTPMux(logger logger.CustomLogger, db mysql.Repo) (core.Mux, func(), er
 		appAuthApiRouter.POST("/orders/:order_id/cancel", userHandler.CancelOrder())
 		appAuthApiRouter.GET("/products", appapi.NewProduct(logger, db, userSvc).ListProductsForApp())
 		appAuthApiRouter.GET("/products/:id", appapi.NewProduct(logger, db, userSvc).GetProductDetailForApp())
-		appAuthApiRouter.GET("/product_categories", appapi.NewProductCategory(logger, db).ListProductCategoriesForApp())
-		appAuthApiRouter.GET("/store/items", appapi.NewStore(logger, db, userSvc).ListStoreItemsForApp())
 		appAuthApiRouter.GET("/lottery/result", activityHandler.LotteryResultByOrder())
 
 		// 需要黑名单检查的抽奖接口组