Java – disable spring security authentication in specific methods

I use spring security 4.0 on my application I have a registration page in my application and I want to exclude this page from checking authentication

My security configuration:

http.antMatcher("/test")
            .httpBasic()
            .and()
            .authorizeRequests()
            .antMatchers("/index.html","/login.html","/","/scripts/**","/bower_components/**","/styles/**","/views/**","/login","/api/user/*").permitAll().anyRequest()
            .authenticated().and().logout().logoutUrl("/api/logout").and()
            .csrf().csrfTokenRepository(csrfTokenRepository()).and()
            .addFilterAfter(csrfHeaderFilter(),CsrfFilter.class);

My controller method:

@RequestMapping(method = RequestMethod.POST,value = "/registration")
public ResponseEntity<RestUser> registration(
        @RequestBody RestUser restuser,Principal p) throws Exception {

}

Solution

Add the registration URL to permit all in the configuration I have added / registered to your spring security configuration

http.antMatcher("/test")
            .httpBasic()
            .and()
            .authorizeRequests()
            .antMatchers("/index.html","/api/user/**","/registration").permitAll().anyRequest()
            .authenticated().and().logout().logoutUrl("/api/logout").and()
            .csrf().csrfTokenRepository(csrfTokenRepository()).and()
            .addFilterAfter(csrfHeaderFilter(),CsrfFilter.class);

to update

Please change / API / user / * to / API / user / * * It should work