Securing Spring boot endpoint with empty authority prefix

I reopened the blog thread. Let’s continue the conversation there: