SecurityConfiguration.java

@Configuration
@EnableWebSecurity(debug = true)
public class SecurityConfiguration extends WebSecurityConfigurerAdapter{

	@Override
	protected void configure(HttpSecurity http) throws Exception {
		http.sessionManagement().disable();
		http.cors().disable();
		http.csrf().disable();
		http.logout().disable();
		http.requestCache().disable();
		http.authorizeRequests().antMatchers("api/v1/employee/**").permitAll();
	}
}