Password Policy issue with Spring security

Hi,

I have implemented Spring security for the embedded spring boot code with Camunda.
I have ignored the internal camunda REST calls with the following config.

@Configuration
@Order(1)
public class SkipSecurityConfig extends WebSecurityConfigurerAdapter {

@Override
protected void configure(HttpSecurity http) throws Exception {
    http.antMatcher("/camunda/**").authorizeRequests().anyRequest().permitAll().and().csrf().disable();
}

}

I am getting an issue when I tried to log in to Camunda UI.

It is redirecting to the login page since the below endpoint is getting 401 unauthorized:
http://localhost:8080/camunda/api/engine/engine/default/identity/password-policy

I’m having the same exact issue.

Using:

  • Spring Boot 2.6.6
  • Camunda 7.17.0