Exclude resources such as html, JavaScript and images

I am working on Spring boot application with jQuery embedded in it. After configuring Okta; when I accessed application which is a index.html(landing page) , Okta is throwing 401.

Is there any way to exclude resources with SpringBoot configuration?

You should be able to extend Spring Security’s WebSecurityConfigurerAdapter and customize which URLs are secured. I used this in my React CRUD post to show how to allow the React app to load.

Hope this helps,


Thanks Matt. It was very helpful!