fix security configuration

src/main/kotlin/com/auth/config/WebSecurityConfig.kt

@@ -11,20 +11,27 @@ import org.springframework.security.config.annotation.web.configurers.SessionMan
 import org.springframework.security.config.http.SessionCreationPolicy
 import org.springframework.security.core.authority.SimpleGrantedAuthority
 import org.springframework.security.oauth2.server.resource.authentication.JwtAuthenticationConverter
-import org.springframework.security.oauth2.server.resource.authentication.JwtGrantedAuthoritiesConverter
 import org.springframework.security.web.SecurityFilterChain
 
 
 @Configuration
 @EnableWebSecurity
-@EnableMethodSecurity
+@EnableMethodSecurity(
+    prePostEnabled = true,  // ← явно включаем
+    securedEnabled = true    // ← опционально
+)
 class WebSecurityConfig () {
 
     @Bean
     @Throws(Exception::class)
     fun filterChain(http: HttpSecurity): SecurityFilterChain? {
         http.authorizeHttpRequests(Customizer { auth ->
-                auth.anyRequest().authenticated() })
+
+            auth.requestMatchers("/public/**", "/health", "/info").permitAll()
+            auth.anyRequest().permitAll()
+                //auth.anyRequest().authenticated()
+
+        })
             .oauth2ResourceServer(Customizer { oauth2 ->
               //  oauth2!!.jwt(Customizer.withDefaults())
                 // добавляем конвертер для извлечения ролей