....

src/main/java/cn/com/qmth/examcloud/web/security/RequestPermissionInterceptor.java

@@ -58,10 +58,12 @@ public class RequestPermissionInterceptor implements HandlerInterceptor {
 		ApiInfo apiInfo = (ApiInfo) request
 				.getAttribute(HttpServletRequestAttribute.$_API_INFO.name());
 
-		Class<?> ctrClass = apiInfo.getBeanType();
-		if (CloudService.class.isAssignableFrom(ctrClass)
-				|| EnterpriseService.class.isAssignableFrom(ctrClass)) {
-			return true;
+		if (null != apiInfo) {
+			Class<?> ctrClass = apiInfo.getBeanType();
+			if (CloudService.class.isAssignableFrom(ctrClass)
+					|| EnterpriseService.class.isAssignableFrom(ctrClass)) {
+				return true;
+			}
 		}
 
 		String mapping = (String) request

src/main/java/cn/com/qmth/examcloud/web/security/RpcInterceptor.java

@@ -30,8 +30,7 @@ import cn.com.qmth.examcloud.web.support.StatusResponse;
  */
 public final class RpcInterceptor implements HandlerInterceptor {
 
-	private static final ExamCloudLog LOG = ExamCloudLogFactory
-			.getLog(RpcInterceptor.class);
+	private static final ExamCloudLog LOG = ExamCloudLogFactory.getLog(RpcInterceptor.class);
 
 	private ResourceManager resourceManager;
 
@@ -42,8 +41,10 @@ public final class RpcInterceptor implements HandlerInterceptor {
 
 		ApiInfo apiInfo = (ApiInfo) request
 				.getAttribute(HttpServletRequestAttribute.$_API_INFO.name());
+		if (null == apiInfo) {
+			return true;
+		}
 		Class<?> ctrClass = apiInfo.getBeanType();
-
 		if (!CloudService.class.isAssignableFrom(ctrClass)) {
 			return true;
 		}