Solutionunvalidated
Define the matcher inside `authorizeHttpRequests` (e.g., `http.authorizeHttpRequests(authz -> authz.requestMatchers("/api/auth/**").permitAll().anyRequest().authenticated())`) or otherwise ensure the effective `requestMatchers` configuration is correctly wired into the `SecurityFilterChain`.
21013de4-e697-4c05-9f34-b3a4611d18d1
Define the matcher inside authorizeHttpRequests (e.g., http.authorizeHttpRequests(authz -> authz.requestMatchers("/api/auth/**").permitAll().anyRequest().authenticated())) or otherwise ensure the effective requestMatchers configuration is correctly wired into the SecurityFilterChain.