Using postman, I can get a list of users with a get request to: http://localhost:8080/users.
http://localhost:8080/users
But when I send a post request to the same address, I get a 40
Please configure your http like this ;
@Override protected void configure(HttpSecurity http) throws Exception { http //configureothers if u wants. .csrf().disable(); }
Please read for more CSRF