I have a REST API secured with OAuth2.0
I am able to get the access-token using *<http://localhost:8085/auth/token?grant_type=password&username=22@gmail.com&password=mypass>*(along with username pass basic auth).  

But when I am trying to access *<http://localhost:8085/api/v1/signup>* , API returns a `401 unauthorized` error.  

Though I have used `antMatchers("/signup").permitAll()`, why API is expecting a `access-token` to access this resource? Passing `access-token` along with this request would signup a user.  

This is my resource server configuration

```
@Configuration
@EnableResourceServer
public class ResourceServerConfig extends ResourceServerConfigurerAdapter {

//require beans and methods here

@Autowired
public void configureGlobal(final AuthenticationManagerBuilder auth) {
    auth.authenticationProvider(authProvider());
}

@Override
public void configure(final HttpSecurity http) throws Exception {
    http
    .authorizeRequests()
    .antMatchers("/signup").permitAll()
    .anyRequest().authenticated()
    .and()
    .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and()
    .csrf().disable();
}
}

```

**Update**: As suggested by [this](https://stackoverflow.com/questions/36296869/spring-security-permitall-still-considering-token-passed-in-authorization-header) thread, I ignored `/signup` at ``, but that also didn't worked.

```
@Configuration
@EnableWebSecurity
@EnableGlobalMethodSecurity(securedEnabled = true, prePostEnabled = true)
@ComponentScan(basePackages = { "com.sample.rest.security" })
@Order(2)
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    //other Beans & methods

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        List<RequestMatcher> requestMatchers = new ArrayList<RequestMatcher>();
        requestMatchers.add(new AntPathRequestMatcher("/signup/**"));

        http.
        requestMatcher(new OrRequestMatcher(requestMatchers)).
        authorizeRequests().antMatchers("/signup/**")
        .permitAll();
    }

}

```