in WebSecurityConfig it should be “/auth/**” not “/auth”101Kamil GregorczykArdiansyahFollowSep 7, 2018 · 1 min readWhy should I add wildcards after “/auth” ?I use PBKDF2 just for example, maybe some people follow the instructions from OWASP 🙂.