How to deny all requests without specific roles - SpringBoot security config

Question

I have the following SpringBoot web security configuration. For authorization, I want to automatically forbid all requests that authentication does not include the roles A