add api permit,request,oauth authentication