• Spring Security creates by default an anonymous role, which can be used for providing anonymous login
  • Using ‘ROLE_ANONYMOUS’ or ‘IS_AUTHENTICATED_ANONYMOUSLY’ gives anonymous users access to any page
  • The default roles for anonymous users can be altered by overriding the default configuration

Configuring Custom Anonymous Role