With spring-security-starter, you need to use this. Ensure all origins, methoda and geaders are proper configured, otherwise it won't work! https://stackoverflow.com/a/40431994/11505343