title: Spring Boot web app w/ both session + CSRF & stateless Basic Auth w/o CSRF
body: <p>I'm trying to stand up a Spring Boot based web server that supports both a secured session-based UI, including CSRF protection and stateless access that is authenticated via basic auth and does not require CSRF.  The two use cases I'm trying to support are a standard AngularJS UI and a simple REST api that authenticates on every request.</p>
  
  <p>Does anyone know how to configure this?  I've seen lots of examples of using one or the other, but not both together.</p>