docs: protected void configureEndpointAccessForStaticResources(final ExpressionUrlAuthorizationConfigurer<HttpSecurity>.ExpressionInterceptUrlRegistry requests) {
          requests
              .requestMatchers(PathRequest.toStaticResources().atCommonLocations())
              .permitAll();
          requests
              .antMatchers("/resources/**")
              .permitAll()
              .antMatchers("/static/**")
              .permitAll();
      }