Spring security - Disable security for OPTIONS (CORS)

WebSecurity.java

@Configuration
public class WebSecurity extends WebSecurityConfigurerAdapter {
	@Override
	protected void configure(HttpSecurity http) throws Exception {

		http
				.csrf().disable()
				.authorizeRequests()
				.antMatchers(HttpMethod.OPTIONS, "**").permitAll()//allow CORS option calls
				.anyRequest().authenticated();

		http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
	}

}

THANK YOU

Thank you very much!

Still its not working..(antMatchers deprecated ...so used requestMatchers)