diff --git a/api-passenger/src/main/java/com/mashibing/apipassenger/interceptor/InterceptorConfig.java b/api-passenger/src/main/java/com/mashibing/apipassenger/interceptor/InterceptorConfig.java
new file mode 100644
index 0000000..dd92cbc
--- /dev/null
+++ b/api-passenger/src/main/java/com/mashibing/apipassenger/interceptor/InterceptorConfig.java
@@ -0,0 +1,18 @@
+package com.mashibing.apipassenger.interceptor;
+
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
+import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
+
+@Configuration
+public class InterceptorConfig implements WebMvcConfigurer {
+
+    @Override
+    public void addInterceptors(InterceptorRegistry registry) {
+        registry.addInterceptor(new JwtInterceptor())
+                // 拦截所有路径
+                .addPathPatterns("/**")
+                // 部份取消拦截路径
+                .excludePathPatterns(("/noauthTest"));
+    }
+}
diff --git a/api-passenger/src/main/java/com/mashibing/apipassenger/interceptor/JwtInterceptor.java b/api-passenger/src/main/java/com/mashibing/apipassenger/interceptor/JwtInterceptor.java
new file mode 100644
index 0000000..73f3a6c
--- /dev/null
+++ b/api-passenger/src/main/java/com/mashibing/apipassenger/interceptor/JwtInterceptor.java
@@ -0,0 +1,47 @@
+package com.mashibing.apipassenger.interceptor;
+
+import com.auth0.jwt.exceptions.AlgorithmMismatchException;
+import com.auth0.jwt.exceptions.SignatureVerificationException;
+import com.auth0.jwt.exceptions.TokenExpiredException;
+import com.mashibing.internalcommon.dto.ResponseResult;
+import com.mashibing.internalcommon.util.JwtUtils;
+import net.sf.json.JSONObject;
+import org.springframework.web.servlet.HandlerInterceptor;
+
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import java.io.PrintWriter;
+
+public class JwtInterceptor implements HandlerInterceptor {
+
+    @Override
+    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
+
+        boolean result = true;
+
+        String resutltString = "" ;
+        String token = request.getHeader ( "Authorization") ;
+        try {
+            JwtUtils.parseToken(token);
+        }catch (SignatureVerificationException e){
+            resutltString="token sign error";
+            result=false;
+        }catch (TokenExpiredException e){
+            resutltString="token time out";
+            result = false;
+        }catch (AlgorithmMismatchException e){
+            resutltString="token AlgorithmMismatchException";
+            result=false;
+        }catch (Exception e) {
+            resutltString = "token invalid";
+            result = false;
+        }
+
+        if (!result){
+            PrintWriter out = response.getWriter();
+            out.print(JSONObject.fromObject( ResponseResult.fail(resutltString) ).toString());
+        }
+
+        return result;
+    }
+}
diff --git a/internal-common/src/main/java/com/mashibing/internalcommon/dto/ResponseResult.java b/internal-common/src/main/java/com/mashibing/internalcommon/dto/ResponseResult.java
index 90a6f0c..43f07fa 100644
--- a/internal-common/src/main/java/com/mashibing/internalcommon/dto/ResponseResult.java
+++ b/internal-common/src/main/java/com/mashibing/internalcommon/dto/ResponseResult.java
@@ -51,7 +51,7 @@ public class ResponseResult<T> {
      * @return
      */
     public static <T> ResponseResult fail(T data){
-        return new ResponseResult().setData(data);
+        return new ResponseResult().setCode(CommonStatusEnum.FAIL.getCode()).setMessage(CommonStatusEnum.FAIL.getValue()).setData(data);
     }
 
 }