diff --git a/psi-probe-core/src/main/java/psiprobe/ProbeSecurityConfig.java b/psi-probe-core/src/main/java/psiprobe/ProbeSecurityConfig.java
index 50200ec128..757313d85d 100644
--- a/psi-probe-core/src/main/java/psiprobe/ProbeSecurityConfig.java
+++ b/psi-probe-core/src/main/java/psiprobe/ProbeSecurityConfig.java
@@ -68,8 +68,10 @@ public class ProbeSecurityConfig {
    */
   @Bean(name = "securityFilterChain")
   public SecurityFilterChain getSecurityFilterChain(HttpSecurity http) throws Exception {
-    http.authorizeHttpRequests().requestMatchers("/webjars/**").permitAll().anyRequest()
-        .authenticated().and().addFilter(getSecurityContextPersistenceFilter())
+    http.authorizeHttpRequests().requestMatchers(new AntPathRequestMatcher("/webjars/**"))
+        .permitAll();
+    http.authorizeHttpRequests().requestMatchers(new AntPathRequestMatcher("/**")).permitAll()
+        .anyRequest().authenticated().and().addFilter(getSecurityContextPersistenceFilter())
         .addFilter(getJ2eePreAuthenticatedProcessingFilter()).addFilter(getLogoutFilter())
         .addFilter(getExceptionTranslationFilter()).addFilter(getFilterSecurityInterceptor());
     return http.build();