title: Why is Spring Security working in Tomcat but not when deployed to Weblogic?
body: <p>I'm not really a Java developer, but a project for a client has required me to be, so maybe I'm missing something glaringly obvious.</p>
  
  <p>I'm using SpringBoot and everything works fine when the application runs in Tomcat on my local machine and on our testing server. However, as soon as the application is deployed to Weblogic it's as if there is no security at all with all routes accessible. Login and logout routes are non-existent as well.</p>
  
  <p>That being said. Everything else appears to work fine, just without any security at all.</p>
  
  <p>I don't have access to Weblogic as the client is the one deploying the code but they have told us that it's running on 12c. What can I do to fix or troubleshoot this?</p>
  
  <p>Here's the relevant config from my Application.java:</p>
  
  <pre><code>/**
   * The type Authentication security.
   */
  @Order(Ordered.HIGHEST_PRECEDENCE)
  @Configuration
  protected static class AuthenticationSecurity extends GlobalAuthenticationConfigurerAdapter {
  
      /**
       * The Users.
       */
      @Autowired
      private Users users;
  
      /**
       * Init void.
       *
       * @param auth the auth
       * @throws Exception the exception
       */
      @Override
      public void init(AuthenticationManagerBuilder auth) throws Exception {
          auth.userDetailsService(users).passwordEncoder(new BCryptPasswordEncoder());
      }
  }
  
  /**
   * The type Application security.
   */
  @Order(SecurityProperties.ACCESS_OVERRIDE_ORDER)
  protected static class ApplicationSecurity extends WebSecurityConfigurerAdapter {
  
      /**
       * Configure void.
       *
       * @param http the http
       * @throws Exception the exception
       */
      @Override
      protected void configure(HttpSecurity http) throws Exception {
          // @formatter:off
          http.authorizeRequests()
                  .antMatchers("/vendor/*","/public/**/*","/partners/*","/events/*", "/login").permitAll()
                  .anyRequest().fullyAuthenticated().and().formLogin().loginPage("/login")
                  .and().logout()
                  .logoutRequestMatcher(new AntPathRequestMatcher("/logout")).and()
                  .exceptionHandling().accessDeniedPage("/access?error");
          // @formatter:on
      }
  
  }
  </code></pre>
  
  <p>Thanks in advance.</p>