title: Spring Boot /h2-console throws 403 with Spring Security 1.5.2
body: <p>We recently upgraded from Spring Boot 1.4.1 to 1.5.2. One of the features of 1.5.2 is that if Spring Security is part of the package then it is protected by basic auth. I am unable to access the <code>/h2-console</code> even after basic auth. It throws 403 forbidden.</p>
  
  <p><code>application.yml</code>:</p>
  
  <pre class="lang-none prettyprint-override"><code>spring:
    datasource:
      driver-class-name: org.h2.Driver
      url: jdbc:h2:file:../app-db/app_db;AUTO_SERVER=TRUE
      username: sa
      password: sa
      initialize: false
    jpa:
      hibernate:
        ddl-auto: validate
      show-sql: true
      database-platform: org.hibernate.dialect.H2Dialect
    h2:
      console:
        enabled: true
        settings:
          web-allow-others: true
    allowed:
      resources: /h2-console/**
  </code></pre>
  
  <p>I have even explicitly allowed <code>/h2-console/**</code> </p>
  
  <pre class="lang-java prettyprint-override"><code> httpSecurity.authorizeRequests()
                  .antMatchers(allowedResources)                  
                  .permitAll()
  </code></pre>
  
  <p>I keep getting 403 when trying to access <code>localhost:8080/h2-console</code>.
  I tried many settings as well as putting:</p>
  
  <pre><code>management.security.enabled=true
  security.basic.enabled=true
  </code></pre>
  
  <p>But I am unable to access the h2-console.</p>