Merge pull request 'Fix #23212: authentication:none broken' (#10) from feature/23212 into develop

Author: fmichielssen

src/main/java/eu/openanalytics/containerproxy/security/WebSecurityConfig.java

@@ -143,15 +143,15 @@ protected void configure(HttpSecurity http) throws Exception {
 			http.addFilter(new BasicAuthenticationFilter(authenticationManagerBean()));
 		}
 
-		// The `anyRequest` method may only be called once.
-		// Therefore we call it here, make our changes to it and forward it to the various authentication backends
-		ExpressionUrlAuthorizationConfigurer<HttpSecurity>.AuthorizedUrl anyRequestConfigurer =  http.authorizeRequests().anyRequest();
 
 		if (auth.hasAuthorization()) {
+			// The `anyRequest` method may only be called once.
+			// Therefore we call it here, make our changes to it and forward it to the various authentication backends
+			ExpressionUrlAuthorizationConfigurer<HttpSecurity>.AuthorizedUrl anyRequestConfigurer =  http.authorizeRequests().anyRequest();
 			anyRequestConfigurer.fullyAuthenticated();
+			auth.configureHttpSecurity(http, anyRequestConfigurer);
 		}
 
-		auth.configureHttpSecurity(http, anyRequestConfigurer);
 
 	}