Spring security - config

@Configuration
@EnableWebSecurity
public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
    ...

    /**
     * filter builder
     * 
     * @param pathsToSkip
     * @param pattern
     * @return
     * @throws Exception
     */
    protected JwtAuthenticationFilter buildJwtAuthenticationFilter(List<String> pathsToSkip, String pattern) throws Exception {
        RequestMatcherImpl requestMatcherImpl = new RequestMatcherImpl(pathsToSkip, pattern);
        JwtAuthenticationFilter filter
            = new JwtAuthenticationFilter(requestMatcherImpl, tokenSimpleUrlAuthenticationSuccessHandler, jwtAuthenticationFailureHandler);
        filter.setAuthenticationManager(this.authenticationManager);
        return filter;
    }

    @Override
    protected void configure(HttpSecurity httpSecurity) throws Exception {    
        
        List<String> permitAllEndpointList = new ArrayList<>();
        permitAllEndpointList.add(AUTHENTICATION_SIGN_IN_URL);
        permitAllEndpointList.add(AUTHENTICATION_SIGN_OUT_URL);
        permitAllEndpointList.add("/");

        httpSecurity
            .csrf().disable()
            // front - back 분리를 위해 cors 설정
            .cors()
                .configurationSource(request -> new CorsConfiguration().applyPermitDefaultValues())
                .and()
            // rest api 구현을 위한 session 설정
            .sessionManagement()
                .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
                .and()
            // 접근 경로 설정
            .authorizeRequests()
                .antMatchers(AUTHENTICATION_SIGN_IN_URL, AUTHENTICATION_SIGN_OUT_URL).permitAll()
                .antMatchers(API_ROOT_URL).authenticated()
                .anyRequest().permitAll()
                .and()
            // 권한이 있는 지 체크 해 주는 필터
            .addFilterBefore(buildJwtAuthenticationFilter(permitAllEndpointList, API_ROOT_URL)
                , UsernamePasswordAuthenticationFilter.class)
            // entry point 설정
            .exceptionHandling().authenticationEntryPoint(authenticationEntryPoint);

    }

    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception{
        // 로그인 인증을 위한 등록
        auth.userDetailsService(authService).passwordEncoder(authService.passwordEncoder());
        // rest api 접근 인증을 위한 등록
        auth.authenticationProvider(jwtAuthenticationProvider);
    }

    @Bean
    @Override
    public AuthenticationManager authenticationManagerBean() throws Exception {
         return super.authenticationManagerBean();
    }
}