title: Spring security - allowing anonymous access
body: <p>I have implemented Oauth2 in my spring-boot app. In my security-context.xml, I have these lines -</p>
  
  <pre><code>&lt;sec:intercept-url pattern="/trusted/**" access="isAnonymous()" /&gt;
  &lt;sec:intercept-url pattern="/**" access="isFullyAuthenticated()" /&gt;
  </code></pre>
  
  <p>I want everything under /trusted to be available without authentication. However, I am still prompted for authentication when I try to access /trusted resources (theses are RESTful resources).</p>
  
  <p>Did I miss something else ?</p>
  
  <p>[Edit:] I am running this app with a 'provided' tomcat instance.</p>