Spring Security 6 with MVC on classpath resolves requestMatchers(HttpMethod, String) to MvcRequestMatcher, which fails to match the actual servlet paths for this service. Switching to explicit AntPathRequestMatcher instances bypasses MVC introspection and forces pure Ant pattern evaluation, fixing persistent 401 on public upload/serve endpoints. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| src/main | ||
| pom.xml | ||