diff --git a/src/main/kotlin/com/auth/config/WebSecurityConfig.kt b/src/main/kotlin/com/auth/config/WebSecurityConfig.kt
index 5d64f1b..3fb8f85 100644
--- a/src/main/kotlin/com/auth/config/WebSecurityConfig.kt
+++ b/src/main/kotlin/com/auth/config/WebSecurityConfig.kt
@@ -27,8 +27,8 @@ class WebSecurityConfig () {
         http.authorizeHttpRequests(Customizer { auth ->
 
             auth.requestMatchers("/public/**", "/health", "/info").permitAll()
-            auth.anyRequest().permitAll()
-            //auth.anyRequest().authenticated()
+            //auth.anyRequest().permitAll()
+            auth.anyRequest().authenticated()
 
         })
             .oauth2ResourceServer(Customizer { oauth2 ->