title: Spring Security Authentication Success With Wrong Password
body: <p>My WebSecurity Config is like below;</p>
  
  <pre><code>@EnableWebSecurity
  @Configuration
  public class WebSecurityConfiguration extends WebSecurityConfigurerAdapter {
  
      @Override
      protected void configure(HttpSecurity http) throws Exception {
          http.authorizeRequests().anyRequest().authenticated().and().httpBasic();
      }
  
      @Override
      protected void configure(AuthenticationManagerBuilder builder) throws Exception {
          builder.inMemoryAuthentication().withUser("hellouser")
                  .password("hellopass").roles("USER");
      }
  }
  </code></pre>
  
  <p>When i give wrong username, Authentication fails as expected. But, if i get success in authentication once, all other requests after that with wrong password but correct username gets authenticated successfully....</p>
  
  <p>Is it getting cached somewhere? </p>
  
  <p>Can i disable this feature?</p>
  
  <p>Isn't it suppose to give authentication failure with wrong password?</p>
  
  <p>NOTE: I am learning spring-security. I dont have any html pages in this app and testing from PostMan.</p>