title: Grails 3 Spring Security application.yml
body: <p>For some reason my staticRules are not applied.</p>
  
  <p>Adding the "org.grails.plugins:spring-security-core:3.0.0.M1" plugin and executing</p>
  
  <pre><code>grails s2-quickstart com.testapp User Role
  </code></pre>
  
  <p>successfully created the Role User and UserRole Domains.
  Also an application.groovy file with some settings was created.</p>
  
  <p>But I am using an application.yml file to configure my app.
  So I moved the properties to my application.yml and deleted the .groovy file.</p>
  
  <p>For some reason the staticRules are not applied. Maybe there is a syntax error.</p>
  
  <pre><code>---
  grails:
      plugin:
          springsecurity:
              userLookup:
                  userDomainClassName: 'User'
                  authorityJoinClassName: 'UserRole'
              authority:
                  className: 'Role'
              apf:
                  postOnly: false
              password:
                  algorithm: 'bcrypt'
              controllerAnnotations:
                  staticRules:
                      /: permitAll
                      /error: permitAll
                      /index: permitAll
                      /index.gsp: permitAll
                      /shutdown: permitAll
                      /assets/**: permitAll
                      /**/js/**: permitAll
                      /**/css/**: permitAll
                      /**/images/**: permitAll
                      /**/favicon.ico: permitAll
      mime:
          disable:
              accept:
                  header:
                      userAgents:
      ...
  </code></pre>
  
  <p>I have tried multiple variants like</p>
  
  <pre><code>'/': 'permitAll'
  /: 'permitAll'
  </code></pre>
  
  <p>But everytime I open localhost:8080/ i am prompted to login!</p>