Search code examples
springoauthspring-security-oauth2

Allow certain endpoint unauthenticated access in spring resource server

I have setup a spring resource server using Spring 5. All my endpoints now require a valid access token. How can I allow my /health endpoint free access? With below configuration, it does not work and health endpoint also requires an access token.

 @Override
protected void configure(HttpSecurity http) throws Exception {
    http
            .authorizeRequests()
            .antMatchers("/health").permitAll()
            .antMatchers("/user").authenticated()
            .and().formLogin()
            .and().requestMatchers()
            .antMatchers("/oauth/authorize");
}
Solution

  • After a lot of research, I added this small piece of code to make it work like a charm.

    @Override
public void configure(WebSecurity web) {
    web.ignoring().antMatchers("/user");
}