Artur (Migrated from SEC-3194) said:

AbstractSecurityWebApplicationInitializer don't have way to customize url mappings, if there will be one abstract method which will return the url, so it always not do filter on '/*'

Comment From: marcusdacoregio

Thanks for the report.

In the latest releases of Spring Security you are able to customize URL mapping by using the HttpSecurity DSL. There are many samples that reproduce what you are trying to achieve, here is one.

You can explore the reference documentation to have more details about the HttpSecurity.