Spring Security - Third Edition

Removing our antMatchers() method

Now that the database is being used to map our security configuration, we can remove the antMatchers() method from our SecurityConfig.java file. Go ahead and remove them, so that the configuration looks similar to the following code snippet:

    // src/main/java/com/packtpub/springsecurity/configuration/    SecurityConfig.java    @Override    protected void configure(HttpSecurity http) throws Exception {    // No interceptor methods    // http.authorizeRequests()    //     .antMatchers("/").permitAll()         ...    http.formLogin()         ...    http.logout()         ...

If you use even one http antMatchers expression, then the custom expression handler will not be invoked.

You should now be able to start the application and test to ensure that our URLs are ...