diff --git a/gym-manage-api/manage-app/src/main/java/cn/novalon/gym/manage/app/config/SystemRouter.java b/gym-manage-api/manage-app/src/main/java/cn/novalon/gym/manage/app/config/SystemRouter.java
index c869da3..546603b 100644
--- a/gym-manage-api/manage-app/src/main/java/cn/novalon/gym/manage/app/config/SystemRouter.java
+++ b/gym-manage-api/manage-app/src/main/java/cn/novalon/gym/manage/app/config/SystemRouter.java
@@ -192,6 +192,19 @@ public class SystemRouter {
                 .POST("/api/permissions", permissionHandler::createPermission)
                 .PUT("/api/permissions/{id}", permissionHandler::updatePermission)
                 .DELETE("/api/permissions/{id}", permissionHandler::deletePermission)
+
+                // ========== 会员模块路由 - 微信认证 ==========
+                .POST("/api/member/auth/miniapp/login", wechatAuthHandler::miniappLogin)
+                .GET("/api/member/auth/mp/callback", wechatAuthHandler::verifyMpSignature)
+                .POST("/api/member/auth/mp/callback", wechatAuthHandler::mpCallback)
+                
+                // ========== 会员模块路由 - 会员信息 ==========
+                .GET("/api/member/info", memberHandler::getMemberInfo)
+                .POST("/api/member/phone/bind", memberHandler::bindPhone)
+                .GET("/api/member/subscribe/status", memberHandler::checkSubscribeStatus)
+                
+                // ========== 会员模块路由 - 管理端 ==========
+                .POST("/api/admin/members/{id}/phone", memberHandler::adminUpdatePhone)
                 
                 .build();
     }
diff --git a/gym-manage-api/manage-gateway/src/main/java/cn/novalon/gym/manage/gateway/filter/JwtAuthenticationFilter.java b/gym-manage-api/manage-gateway/src/main/java/cn/novalon/gym/manage/gateway/filter/JwtAuthenticationFilter.java
index cc54fbd..749702c 100644
--- a/gym-manage-api/manage-gateway/src/main/java/cn/novalon/gym/manage/gateway/filter/JwtAuthenticationFilter.java
+++ b/gym-manage-api/manage-gateway/src/main/java/cn/novalon/gym/manage/gateway/filter/JwtAuthenticationFilter.java
@@ -47,6 +47,7 @@ public class JwtAuthenticationFilter extends AbstractGatewayFilterFactory<JwtAut
 
             ServerHttpRequest modifiedRequest = request.mutate()
                     .header("X-User-Id", String.valueOf(userId))
+                    .header("X-Member-Id", String.valueOf(userId))
                     .header("X-Username", username)
                     .build();
 
@@ -57,7 +58,11 @@ public class JwtAuthenticationFilter extends AbstractGatewayFilterFactory<JwtAut
     private boolean isPublicPath(String path) {
         return path.startsWith("/api/auth/") || 
                path.equals("/actuator/health") ||
-               path.startsWith("/actuator/info");
+               path.startsWith("/actuator/info") ||
+               path.equals("/api/member/auth/miniapp/login") || 
+               path.equals("/api/member/auth/mp/callback") || 
+               path.equals("/api/auth/login") || 
+               path.startsWith("/actuator/info");;
     }
 
     public static class Config {
diff --git a/gym-manage-api/manage-gateway/src/main/resources/application.yml b/gym-manage-api/manage-gateway/src/main/resources/application.yml
index 05186f8..240c1f0 100644
--- a/gym-manage-api/manage-gateway/src/main/resources/application.yml
+++ b/gym-manage-api/manage-gateway/src/main/resources/application.yml
@@ -9,27 +9,27 @@ spring:
   cloud:
     gateway:
       routes:
-        - id: manage-app
-          uri: http://localhost:8084
-          predicates:
-            - Path=/api/**
+      - id: manage-app
+        uri: http://localhost:8084
+        predicates:
+        - Path=/api/**
       default-filters:
-        - name: JwtAuthentication
-        - name: RbacAuthorization
-        - name: Retry
-          args:
-            retries: 3
-            statuses: BAD_GATEWAY,SERVICE_UNAVAILABLE
-            methods: GET,POST
-            backoff:
-              firstBackoff: 10ms
-              maxBackoff: 50ms
-              factor: 2
-              basedOnPreviousValue: false
-        - name: DedupeResponseHeader
-          args:
-            name: Content-Encoding
-            strategy: RETAIN_FIRST
+      - name: JwtAuthentication
+      - name: RbacAuthorization
+      - name: Retry
+        args:
+          retries: 3
+          statuses: BAD_GATEWAY,SERVICE_UNAVAILABLE
+          methods: GET,POST
+          backoff:
+            firstBackoff: 10ms
+            maxBackoff: 50ms
+            factor: 2
+            basedOnPreviousValue: false
+      - name: DedupeResponseHeader
+        args:
+          name: Content-Encoding
+          strategy: RETAIN_FIRST
 
 jwt:
   secret: ${JWT_SECRET:enc:U2FsdGVkX1+vZ5Y9QmKxL8nN3rP7tW2jH4fG6dA8sB1cE5yN0zX3qV7wM4}
@@ -64,7 +64,7 @@ signature:
   max-age-minutes: ${SIGNATURE_MAX_AGE_MINUTES:5}
   nonce-cache-size: ${SIGNATURE_NONCE_CACHE_SIZE:10000}
   whitelist:
-    paths: ${SIGNATURE_WHITELIST_PATHS:/actuator/health,/actuator/info,/api/auth/login}
+    paths: ${SIGNATURE_WHITELIST_PATHS:/actuator/health,/actuator/info,/api/auth/login,/api/auth/register,/api/member/auth/miniapp/login,/api/member/auth/mp/callback}
 
 resilience:
   enabled: ${RESILIENCE_ENABLED:true}