Spring Security 6 MvcRequestMatcher (used when no HttpMethod is specified and Spring MVC is on the classpath) fails to match the upload endpoint, falling through to anyRequest().authenticated() and returning 401. Specifying HttpMethod forces AntRequestMatcher which matches reliably. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| src/main | ||
| pom.xml | ||