ConfiguringSecurity.java

@Bean
public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
        http
                .authorizeHttpRequests((authz) -> authz
                        .requestMatchers("/login", "/register")
                        .permitAll() // Login and register endpoints are accessible to allf
                        .anyRequest()
                        .authenticated() // Any other requests require authentication
                )
                .httpBasic(withDefaults()); // Enables basic authentication with default settings
        return http.build(); // Builds and returns the security filter chain
}

@Bean
public WebSecurityCustomizer webSecurityCustomizer() {
        return (web) -> web.ignoring()
                .requestMatchers("/css/**", "/js/**", "/images/**"); // Ignores requests to static resources
}