title: 'Spring Boot Security Starter and 'Key Cloak Spring Boot Starter' secures GET correctly but not POST
body: <p>I'm attempting to get a Spring Boot application I'm building to be protected by KeyCloak. I'm depending on the <code>spring-boot-starter-security</code> and <code>keycloak-spring-boot-starter</code> dependencies; this <a href="https://gist.github.com/mlk5060/40bb5c1250c233d1ae7bef5864c3fb7b" rel="nofollow noreferrer">Gist</a> shows the relevant setup. I can make a GET request to <code>/updates</code> successfully, but a <code>POST</code> request to <code>/updates</code> returns a <code>403</code> response (requests have a bearer token that is the access token retrieved for a user from KeyCloak who has the required role).</p>
  
  <p>How do I setup KeyCloak and my application so that I can get consistent behaviour i.e. if GET on <code>updates</code> is allowed, POST on <code>updates</code> should be too?</p>