diff --git a/aconnect/src/main/java/com/mfsys/aconnect/client/controller/TransactionPermissionController.java b/aconnect/src/main/java/com/mfsys/aconnect/client/controller/TransactionPermissionController.java
index 4415b06..adc703d 100644
--- a/aconnect/src/main/java/com/mfsys/aconnect/client/controller/TransactionPermissionController.java
+++ b/aconnect/src/main/java/com/mfsys/aconnect/client/controller/TransactionPermissionController.java
@@ -22,18 +22,18 @@ public class TransactionPermissionController {
 
     @PostMapping(AconnectURI.ASSIGN_PERMISSIONS)
     public ResponseEntity<List<TransactionPermissionDTO.PermissionResponse>> assignPermissions(
-            @RequestBody TransactionPermissionDTO.AssignPermissionsRequest request, @RequestHeader("Authorization") String token) {
-        return new ResponseEntity<>(permissionService.assignPermissions(request, token), HttpStatus.CREATED);
+            @RequestBody TransactionPermissionDTO.AssignPermissionsRequest request) {
+        return new ResponseEntity<>(permissionService.assignPermissions(request), HttpStatus.CREATED);
     }
 
     @GetMapping(AconnectURI.GET_TRANSACTION_PERMISSIONS)
     public ResponseEntity<List<TransactionPermissionDTO.PermissionResponse>> getUserPermissions(
-            @PathVariable String userId, @RequestHeader("Authorization") String token) {
-        return ResponseEntity.ok(permissionService.getUserPermissions(userId, token));
+            @PathVariable String userId) {
+        return ResponseEntity.ok(permissionService.getUserPermissions(userId));
     }
 
     @GetMapping(AconnectURI.GET_TRANSACTION_ENDPOINTS)
-    public ResponseEntity<List<String>> getAllEndpoints(@RequestHeader("Authorization") String token) {
+    public ResponseEntity<List<String>> getAllEndpoints() {
         List<String> endpoints = Arrays.stream(TransactionEndpoint.values())
                 .map(TransactionEndpoint::getCode)
                 .collect(Collectors.toList());
diff --git a/aconnect/src/main/java/com/mfsys/aconnect/client/service/TransactionPermissionService.java b/aconnect/src/main/java/com/mfsys/aconnect/client/service/TransactionPermissionService.java
index 216c56d..fd30f19 100644
--- a/aconnect/src/main/java/com/mfsys/aconnect/client/service/TransactionPermissionService.java
+++ b/aconnect/src/main/java/com/mfsys/aconnect/client/service/TransactionPermissionService.java
@@ -17,7 +17,7 @@ public class TransactionPermissionService {
     }
 
     @Transactional
-    public List<TransactionPermissionDTO.PermissionResponse> assignPermissions(TransactionPermissionDTO.AssignPermissionsRequest request, String token) {
+    public List<TransactionPermissionDTO.PermissionResponse> assignPermissions(TransactionPermissionDTO.AssignPermissionsRequest request) {
         String porOrgacode = request.getPorOrgacode();
         permissionRepository.deleteByUserId(request.getUserId());
         List<TransactionPermission> permissions = request.getTransactionEndpoints().stream()
@@ -33,7 +33,7 @@ public class TransactionPermissionService {
         return saved.stream().map(this::mapToResponse).collect(Collectors.toList());
     }
 
-    public List<TransactionPermissionDTO.PermissionResponse> getUserPermissions(String userId, String token) {
+    public List<TransactionPermissionDTO.PermissionResponse> getUserPermissions(String userId) {
         return permissionRepository.findByUserId(userId)
                 .stream()
                 .map(this::mapToResponse)
diff --git a/common/src/main/java/com/mfsys/common/configuration/constant/TokenBypassURI.java b/common/src/main/java/com/mfsys/common/configuration/constant/TokenBypassURI.java
index 6ac5b36..9570cf9 100644
--- a/common/src/main/java/com/mfsys/common/configuration/constant/TokenBypassURI.java
+++ b/common/src/main/java/com/mfsys/common/configuration/constant/TokenBypassURI.java
@@ -9,6 +9,7 @@ public interface TokenBypassURI {
           "/aconnect/authentication/login",
           "/aconnect/authentication/signup",
           "/aconnect/signin",
+          "/aconnect/createThirdPartyUser",
 
           "/aconnect/deposit/uploadDocument",
           "/aconnect/crm/uploadDocument",