[fix] Add missing permission annotations to /appAuth/updateSk and /sandbox/proxyGateway

shenyu-admin/src/http/http-debug-app-auth-controller-api.http

@@ -61,16 +61,11 @@ X-Access-Token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyTmFtZSI6ImFkbWluIiw
 }
 
 ### updateSk
-GET http://localhost:9095/appAuth/updateSk?appKey=123&appSecret=123
+POST http://localhost:9095/appAuth/updateSk?appKey=123&appSecret=123
 Accept: application/json
 Content-Type: application/json
 X-Access-Token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyTmFtZSI6ImFkbWluIiwiZXhwIjoxNjQ4NjUwMDg2fQ.aDeChT_Ey6FwYDdzSkc9ZLBHd5v-LVUZ6BPcYqJCo-Y
 
-{
-  "id": 123,
-  "name": "order"
-}
-
 ### app auth list by page
 GET http://localhost:9095/appAuth/findPageByQuery?currentPage=1&pageSize=10
 Accept: application/json

shenyu-admin/src/main/java/org/apache/shenyu/admin/controller/AppAuthController.java

@@ -82,7 +82,8 @@ public ShenyuAdminResult apply(@Valid @RequestBody final AuthApplyDTO authApplyD
      * @param appSecret the app secret
      * @return the shenyu result
      */
-    @GetMapping("/updateSk")
+    @PostMapping("/updateSk")
+    @RequiresPermissions("system:authen:edit")
     public ShenyuAdminResult updateSk(@RequestParam("appKey")
                                       @Existed(message = "app key not existed",
                                               provider = AppKeyProvider.class) final String appKey,

shenyu-admin/src/main/java/org/apache/shenyu/admin/controller/SandboxController.java

@@ -20,6 +20,7 @@
 import org.apache.shenyu.admin.aspect.annotation.RestApi;
 import org.apache.shenyu.admin.model.dto.ProxyGatewayDTO;
 import org.apache.shenyu.admin.service.SandboxService;
+import org.apache.shiro.authz.annotation.RequiresPermissions;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 
@@ -49,6 +50,7 @@ public SandboxController(final SandboxService sandboxService) {
      * @throws IOException throw io exception
      */
     @PostMapping(path = "/proxyGateway")
+    @RequiresPermissions("system:authen:list")
     public void proxyGateway(@RequestBody @Valid final ProxyGatewayDTO proxyGatewayDTO,
                             final HttpServletRequest request,
                             final HttpServletResponse response) throws IOException {

shenyu-admin/src/test/java/org/apache/shenyu/admin/controller/AppAuthControllerTest.java

@@ -186,7 +186,7 @@ public void testApplyWithAppKey() throws Exception {
 
     @Test
     public void testUpdateSk() throws Exception {
-        this.mockMvc.perform(MockMvcRequestBuilders.get("/appAuth/updateSk")
+        this.mockMvc.perform(MockMvcRequestBuilders.post("/appAuth/updateSk")
                 .param("appKey", "testAppKey")
                 .param("appSecret", "updateAppSecret"))
                 .andExpect(status().isOk())

shenyu-dist/shenyu-admin-dist/src/main/release-docs/LICENSE

@@ -501,6 +501,8 @@ The text of each license is the standard Apache 2.0 license.
     javatuples 1.2: https://mvnrepository.com/artifact/org.javatuples/javatuples, Apache 2.0
     json-schema-core 1.2.14: https://mvnrepository.com/artifact/com.github.java-json-tools/json-schema-core, Apache 2.0
     uri-template 0.10: https://github.com/java-json-tools/uri-template, Apache 2.0
+    zookeeper 3.9.5: https://gitbox.apache.org/repos/asf/zookeeper, Apache 2.0
+    zookeeper-jute 3.9.5: https://gitbox.apache.org/repos/asf/zookeeper, Apache 2.0
 
 ========================================================================
 BSD licenses
@@ -577,6 +579,7 @@ The text of each license is also included at licenses/LICENSE-[project].txt.
     checker-qual 3.33.0: https://checkerframework.org/, MIT
     jopt-simple 5.0.4: https://github.com/jopt-simple/jopt-simple, MIT
     oshi-core 6.10.0: https://github.com/oshi/oshi, MIT
+    oshi-core 6.7.0: https://github.com/oshi/oshi, MIT
 
 ========================================================================
 MPL licenses
@@ -713,6 +716,7 @@ Bouncy Castle licenses
     bcprov-jdk18on 1.78: https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on, Bouncy Castle
     bcutil-jdk18on 1.72: https://mvnrepository.com/artifact/org.bouncycastle/bcutil-jdk18on, Bouncy Castle
     bcpkix-jdk18on 1.72: https://mvnrepository.com/artifact/org.bouncycastle/bcpkix-jdk18on, Bouncy Castle
+    bcprov-jdk18on 1.84: https://github.com/bcgit/bc-java, Bouncy Castle
 
 ========================================================================
 XPP License

shenyu-dist/shenyu-bootstrap-dist/src/main/release-docs/LICENSE

@@ -631,6 +631,31 @@ The text of each license is the standard Apache 2.0 license.
     javatuples 1.2: https://mvnrepository.com/artifact/org.javatuples/javatuples, Apache 2.0
 
     jna-platform 5.16.0: https://github.com/java-native-access/jna, Apache 2.0
+    lz4-java 1.10.1: https://github.com/yawkat/lz4-java, Apache 2.0
+    itu 1.14.0: https://github.com/ethlo/itu, Apache 2.0
+    jsonschema-generator 4.38.0: https://github.com/victools/jsonschema-generator, The Apache License, Version 2.0
+    jsonschema-module-jackson 4.38.0: https://github.com/victools/jsonschema-generator, The Apache License, Version 2.0
+    jsonschema-module-swagger-2 4.38.0: https://github.com/victools/jsonschema-generator, The Apache License, Version 2.0
+    re2j 1.8: https://github.com/google/re2j, Go License
+    json-schema-validator 2.0.0: https://github.com/networknt/json-schema-validator, Apache License Version 2.0
+    motan-core 1.2.1: https://github.com/weibocom/motan, The Apache License, Version 2.0
+    motan-registry-zookeeper 1.2.1: https://github.com/weibocom/motan, The Apache License, Version 2.0
+    motan-springsupport 1.2.1: https://github.com/weibocom/motan, The Apache License, Version 2.0
+    motan-transport-netty4 1.2.1: https://github.com/weibocom/motan, The Apache License, Version 2.0
+    swagger-annotations-jakarta 2.2.38: https://github.com/swagger-api/swagger-core, Apache License 2.0
+    dubbo-dependencies-zookeeper 3.2.14: https://www.apache.org/licenses/LICENSE-2.0.txt, Apache 2.0
+    kafka-clients 3.9.2: https://kafka.apache.org, The Apache License, Version 2.0
+    log4j-1.2-api 2.23.1: https://www.apache.org/licenses/LICENSE-2.0.txt, Apache 2.0
+    zookeeper 3.9.5: https://gitbox.apache.org/repos/asf/zookeeper, Apache 2.0
+    zookeeper-jute 3.9.5: https://gitbox.apache.org/repos/asf/zookeeper, Apache 2.0
+    spring-ai-client-chat 1.1.2: https://github.com/spring-projects/spring-ai, Apache 2.0
+    spring-ai-commons 1.1.2: https://github.com/spring-projects/spring-ai, Apache 2.0
+    spring-ai-deepseek 1.1.2: https://github.com/spring-projects/spring-ai, Apache 2.0
+    spring-ai-mcp 1.1.2: https://github.com/spring-projects/spring-ai, Apache 2.0
+    spring-ai-model 1.1.2: https://github.com/spring-projects/spring-ai, Apache 2.0
+    spring-ai-openai 1.1.2: https://github.com/spring-projects/spring-ai, Apache 2.0
+    spring-ai-retry 1.1.2: https://github.com/spring-projects/spring-ai, Apache 2.0
+    spring-ai-template-st 1.1.2: https://github.com/spring-projects/spring-ai, Apache 2.0
 
 ========================================================================
 BSD licenses
@@ -747,6 +772,12 @@ The text of each license is also included at licenses/LICENSE-[project].txt.
     dexx-collections 0.2: https://github.com/andrewoma/dexx, MIT
     checker-qual 3.33.0: https://github.com/typetools/checker-framework/blob/master/checker-qual, MIT
     oshi-core 6.10.0: https://github.com/oshi/oshi, MIT
+    oshi-core 6.7.0: https://github.com/oshi/oshi, MIT
+    mcp 0.17.0: https://github.com/modelcontextprotocol/java-sdk, MIT
+    mcp-core 0.17.0: https://github.com/modelcontextprotocol/java-sdk, MIT
+    mcp-json 0.17.0: https://github.com/modelcontextprotocol/java-sdk, MIT
+    mcp-json-jackson2 0.17.0: https://github.com/modelcontextprotocol/java-sdk, MIT
+    mcp-spring-webflux 0.17.0: https://github.com/modelcontextprotocol/java-sdk, MIT
 
 ========================================================================
 MPL licenses
@@ -774,6 +805,7 @@ Bouncy Castle licenses
     bcutil-jdk18on 1.78: https://mvnrepository.com/artifact/org.bouncycastle/bcutil-jdk18on, Bouncy Castle
     bcpkix-jdk18on 1.78: https://mvnrepository.com/artifact/org.bouncycastle/bcpkix-jdk18on, Bouncy Castle
     bcprov-ext-jdk18on 1.78: https://mvnrepository.com/artifact/org.bouncycastle/bcprov-ext-jdk18on, Bouncy Castle
+    bcprov-jdk18on 1.84: https://github.com/bcgit/bc-java, Bouncy Castle
 
 ========================================================================
 EDL License