diff --git a/middleware/jwt/default.go b/middleware/jwt/default.go
index bba7a2a..2496098 100644
--- a/middleware/jwt/default.go
+++ b/middleware/jwt/default.go
@@ -2,6 +2,7 @@ package jwt
 
 import (
 	"context"
+	"fmt"
 	"git.diulo.com/mogfee/kit/errors"
 	"git.diulo.com/mogfee/kit/transport"
 	"git.diulo.com/mogfee/kit/transport/http"
@@ -49,10 +50,11 @@ func (j *JwtDefault) Validate(ctx context.Context, permission string, permission
 	for _, v := range allowPers {
 		allowMap[v] = true
 	}
+	fmt.Printf("permissions:%+v\n", allowMap)
 	for _, v := range permissions {
 		if allowMap[v] {
 			return nil
 		}
 	}
-	return errors.BadRequest("TOKEN_PERMISSION_BAD", "")
+	return errors.Forbidden("TOKEN_PERMISSION_BAD", "")
 }