Spring security: how to ignore some paths Mar 22, 2017 Here is the way to configure Spring Security to tell him to ignore some paths. It could be useful when you need to have public APIs or make static resources public. @EnableWebSecurity public class SecurityConfig extends WebSecurityConfigurerAdapter { @Override public void configure(WebSecurity web) throws Exception { web.ignoring().antMatchers("/static/**"); } } Spring boot: 1.3.3.RELEASE Spring Security: 4.0.3.RELEASE