@Override
    protected void configure(HttpSecurity http) throws Exception {
      http.csrf()
          .disable();

      http.authorizeRequests()
          .antMatchers(HttpMethod.OPTIONS)
          .permitAll();

      http.authorizeRequests()
          .antMatchers(WHITE_LIST_URLS)
          .permitAll();

      http.authorizeRequests()
          .antMatchers(
              "/health",
              "/loggers/**",
              "/env")
          .authenticated()
          .and()
          .httpBasic()
          .realmName(REALM)
          .authenticationEntryPoint(new CustomAuthenticationEntryPoint());

      http.authorizeRequests()
          .anyRequest()
          .authenticated()
          .and()
          .sessionManagement()
          .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
          .and()
          .addFilterBefore(webSecurityCorsFilter().getFilter(), ChannelProcessingFilter.class)
          .addFilterAfter(jwtAuthenticationFilter().getFilter(), BasicAuthenticationFilter.class);
    }

      http.authorizeRequests()
          .anyRequest()
          .authenticated()
          .and()
          .sessionManagement()
          .sessionCreationPolicy(SessionCreationPolicy.STATELESS)
          .and()
          .addFilterBefore(webSecurityCorsFilter().getFilter(), ChannelProcessingFilter.class)
          .addFilterAfter(jwtAuthenticationFilter().getFilter(), BasicAuthenticationFilter.class);