MultipleSecurityConfig.java

@Configuration
@EnableWebSecurity(debug=true)
public class MultipleSecurityCofig extends WebSecurityConfigurerAdapter {
	
	@Order(1)
	@Configuration
	public  static class EmployeeConfig extends WebSecurityConfigurerAdapter{

		@Override
		protected void configure(HttpSecurity http) throws Exception {		
			http.antMatcher("/api/v1/employee/**").authorizeRequests().antMatchers("/api/v1/employee/**").permitAll()
			.and().sessionManagement().disable()
			.cors().disable()
			.csrf().disable()
			.logout().disable()
			.requestCache().disable()
			.headers().disable();
		}
	}

	@Order(2)
	@Configuration
	public static class ManagerConfig extends WebSecurityConfigurerAdapter{
		
		@Override
		protected void configure(HttpSecurity http) throws Exception {
			http.antMatcher("/api/v1/manager/**").authorizeRequests().antMatchers("/api/v1/manager/**").permitAll()
			.and().addFilterAfter(new AuditLogFilter(), FilterSecurityInterceptor.class);
		}
		
	}

}