Spring ignores permitAll rule

Question

I have the following WebSecurity configuration:

        @Autowired
        private ApplicationAuthenticationProvider appProvider;
        
        @Bean
        @