Spring Security oauth并关闭某些urls的安全性，但保持基本身份验证激活

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/public/**").permitAll() // 允许访问的URL
                .anyRequest().authenticated() // 其他URL需要身份验证
                .and()
            .formLogin()
                .and()
            .httpBasic();
    }
}

@Override
protected void configure(AuthenticationManagerBuilder auth) throws Exception {
    auth
        .inMemoryAuthentication()
            .withUser("user")
                .password("{noop}password") // 使用明文密码，实际应用中应使用加密密码
                .roles("USER");
}