title: Permit URL request based on mask
body: <p>I wan to configure Spring Security to allow request based on mask:</p>
  
  <pre><code>/{localization}/payment/{transaction_id}
  </code></pre>
  
  <p>Is this correct?</p>
  
  <pre><code>http.authorizeRequests().antMatchers("/*/payment/*").permitAll().anyRequest().permitAll();
  </code></pre>
  
  <p>Or I need to use this?</p>
  
  <pre><code>http.authorizeRequests().antMatchers("/**/payment/**").permitAll().anyRequest().permitAll();
  </code></pre>
  
  <p>Which one should I use?</p>