title: Spring WebSecurity configuration using .ignoring() not working
body: <p>I've been struggling for a few days over this. Aside from quirky things that seem to be happening inconsistently and unpredictably by simply commenting out a bit of code, running the program, and then uncommenting and running again, I'm failing to understand how overriding various configure methods are working. </p>
  
  <p>I want WebSecurity to always ignore "/static/**". </p>
  
  <p>Upon launching the application and navigating to the homepage, I can access all of the pages for which I have permitted all, but all of the content in "/static/**" is being ignored until after I have navigated to the login page and logged in as an authenticated user. So the application just appears as white pages with text, without any of the styling at all until logged in.</p>
  
  <p>Here is the code for my AppSecurityConfig class. I have omitted the helper methods for handling success and failure of logging in, and I also have to different account types that serve different roles, so I have only included one account here for simplification. The part where I believe the problem exists is in the configure(WebSecurity web) method where I am calling the .ignoring() method and passing the "/static/**" arg. Thank you in advance:</p>
  
  <pre><code>@Configuration
  @EnableWebSecurity
  public class SecurityConfig extends WebSecurityConfigurerAdapter {
      @Autowired
      private CompanyService companyService;
  
      @Autowired
      public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
          auth.userDetailsService(companyService);
      }
  
      @Override
      public void configure(WebSecurity web) throws Exception {
          web.ignoring().antMatchers("/static/**");
      }
  
      @Override
      protected void configure(HttpSecurity http) throws Exception {
          http
              .authorizeRequests()
                  .antMatchers("/",
                          "/account_registration",
                          "/candidate_registration",
                          "/addCandidate",
                          "/company_registration",
                          "/addCompany",
                          "/select_account_type",
                          "/candidate_login",
                          "/company_login").permitAll()
                  .antMatchers("/company_profile").hasRole("COMPANY")
                  .anyRequest().authenticated()
                  .and()
              .formLogin()
                  .loginPage("/company_login")
                  .permitAll()
                  .successHandler(companyLoginSuccessHandler())
                  .failureHandler(companyLoginFailureHandler())
                  .and()
              .logout()
                  .logoutSuccessUrl("/");
  
      }
  }
  </code></pre>