add-pre-authorize.java

@RestController
@RequestMapping("/app")
public class AppController {

    @GetMapping(path = "/test")
    @PreAuthorize("hasAuthority('READ')")
    public String test(Principal principal) {
        return principal.getName();
    }
}