diff --git a/pig-common/pig-common-security/src/main/java/com/pig4cloud/pig/common/security/component/PigBearerTokenExtractor.java b/pig-common/pig-common-security/src/main/java/com/pig4cloud/pig/common/security/component/PigBearerTokenExtractor.java
index a5e9f5c0..47353cf9 100644
--- a/pig-common/pig-common-security/src/main/java/com/pig4cloud/pig/common/security/component/PigBearerTokenExtractor.java
+++ b/pig-common/pig-common-security/src/main/java/com/pig4cloud/pig/common/security/component/PigBearerTokenExtractor.java
@@ -41,7 +41,7 @@ public class PigBearerTokenExtractor implements BearerTokenResolver {
 
 	private boolean allowFormEncodedBodyParameter = false;
 
-	private boolean allowUriQueryParameter = false;
+	private boolean allowUriQueryParameter = true;
 
 	private String bearerTokenHeaderName = HttpHeaders.AUTHORIZATION;