diff --git a/app/Http/Controllers/Module/ModuleController.php b/app/Http/Controllers/Module/ModuleController.php
index de467b6..0068527 100644
--- a/app/Http/Controllers/Module/ModuleController.php
+++ b/app/Http/Controllers/Module/ModuleController.php
@@ -37,7 +37,8 @@ private function fixPath(Request $request, Module $module, $prefix): string
     {
         $path = substr($request->path(), strlen("/$prefix/modules/$module->id"));
 
-        return preg_replace('/[^a-zA-Z0-9\/]/', '', $path);
+        // 去除 非法字符
+        return preg_replace('/[^a-zA-Z0-9\/\-]/', '', $path);
     }
 
     public function exportCall(Request $request, Module $module): Response|JsonResponse
diff --git a/app/Models/Module.php b/app/Models/Module.php
index d325d37..2236c69 100644
--- a/app/Models/Module.php
+++ b/app/Models/Module.php
@@ -117,18 +117,20 @@ public function baseRequest($method, $path, $requests = []): array
     {
         $user = auth('sanctum')->user();
 
+        $http = $this->http();
         if ($user) {
-            $this->http()->withHeaders([
+            $http = $http->withHeaders([
                 'X-User-Id' => $user->id,
             ]);
-            $requests['user_id'] = $user->id;
-            if ($method == 'post') {
-                // add user to requests
-                $requests['user'] = $user;
-            }
+
+            // $requests['user_id'] = $user->id;
+            // if ($method == 'post') {
+            //     // add user to requests
+            //     $requests['user'] = $user;
+            // }
         }
 
-        $response = $this->http()->{$method}($path, $requests);
+        $response = $http->{$method}($path, $requests);
 
         return $this->getResponse($response);
     }