diff --git a/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/2.token-server-ingresses.yaml b/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/2.token-server-ingresses.yaml
index 808eb18..37808ab 100644
--- a/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/2.token-server-ingresses.yaml
+++ b/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/2.token-server-ingresses.yaml
@@ -16,7 +16,7 @@
   - host: token.paas.xxx.edu.cn
     http:
       paths:
-      - path: /
+      - path: /token
         backend:
           serviceName: token-server-svc
           servicePort: http
diff --git a/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.0.token-server-installer.yaml b/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.0.token-server-installer.yaml
index 9b43336..ad0118a 100644
--- a/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.0.token-server-installer.yaml
+++ b/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.0.token-server-installer.yaml
@@ -28,7 +28,7 @@
       containers:
       - name: token-server-installer
         # 若使用了学校搭设的私有仓库，请修改
-        image: harbor.supwisdom.com/token-server/token-server-installer:1.3.1-RELEASE
+        image: harbor.supwisdom.com/token-server/token-server-installer:1.4.0-RELEASE
         imagePullPolicy: Always
         envFrom:
         - configMapRef:
diff --git a/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.1.token-server.yaml b/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.1.token-server.yaml
index b7cc3bf..f116acc 100644
--- a/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.1.token-server.yaml
+++ b/deploy-manifests/k8s-rancher/1.authx-service/5.token-server/4.1.token-server.yaml
@@ -13,7 +13,9 @@
   #SSL_KEYSTORE_FILE: file:/certs/server/server.keystore
   #SSL_KEYSTORE_PASSWORD: ""
 
-  SERVER_MAXHTTPHEADERSIZE: "10240"
+  SERVER_SERVLET_CONTEXT_PATH: "/token"
+
+  SERVER_MAXHTTPHEADERSIZE: "20480"
 
   SERVER_TOMCAT_ACCEPT_COUNT: "5000"
   SERVER_TOMCAT_MAX_CONNECTIONS: "10000"
@@ -89,6 +91,8 @@
   MESSAGECENTER_MESSAGE_TYPE_CODE_APP_LOGIN: APP_LOGIN
   MESSAGECENTER_MESSAGE_TYPE_CODE_PASSWORD: PASSWORD
 
+  MESSAGECENTER_MESSAGE_TYPE_CODE_APPPUSH: APPPUSH
+
   # **修改** 从POA申请
   POA_SERVER_URL: https://poa.paas.xxx.edu.cn
   POA_CLIENT_ID: ""
@@ -122,6 +126,15 @@
   #TPAS_AGENT_SERVICE_CLIENT_AUTH_TRUSTSTORE_PASSWORD: ""
 
   TPAS_AGENT_SERVICE_SMS_SENDER_PATH: /api/v1/tpas/sms/console/send
+  TPAS_AGENT_SERVICE_FACE_FACEVERIFY_PATH: /api/v1/tpas/face/aiface/faceverify
+
+
+  AUTHX_LOG_ENABLED: "true"
+  AUTHX_LOG_RABBITMQ_HOST: rabbitmq-server.authx-service.svc.cluster.local
+  AUTHX_LOG_RABBITMQ_PORT: "5672"
+  AUTHX_LOG_RABBITMQ_USERNAME: guest
+  AUTHX_LOG_RABBITMQ_PASSWORD: guest
+
 
 ---
 apiVersion: v1
@@ -179,7 +192,7 @@
       containers:
       - name: token-server
         # 若使用了学校搭设的私有仓库，请 **修改**
-        image: harbor.supwisdom.com/token-server/token-server:1.3.1-RELEASE
+        image: harbor.supwisdom.com/token-server/token-server:1.4.0-RELEASE
         imagePullPolicy: Always
         ports:
         - containerPort: 8080
@@ -204,7 +217,7 @@
             memory: "1024Mi"
         readinessProbe:
           httpGet:
-            path: /actuator/health
+            path: /token/actuator/health
             port: 8080
           initialDelaySeconds: 20
           periodSeconds: 5