Instead of getting 401 (that is the standard code for wrong authentication in spring security) I get Also, a maxAge of 30 minutes is used. You can customize this behavior by specifying the value of one of the following annotation attributes: 确认网址正确性：为了安全起见，用户在访问百度网盘官网时，应确认网址的正确性，防止访问到假冒网站，造成个人信息泄露或财产损失。 Like most Spring Get... https://josephg962ghi9.theideasblog.com/profile