allowed

Author: syedabdullahrahman

src/main/java/abdullah/todomanagement/security/SecurityConfiguration.java

@@ -30,7 +30,7 @@ public void configureGlobalSecurity(AuthenticationManagerBuilder auth)
     protected void configure(HttpSecurity http) throws Exception {
         http.cors().and().authorizeRequests()
                 .antMatchers("/login", "/h2-console/**").permitAll()
-				.antMatchers("/api/tutorials/**").permitAll()
+				.antMatchers("/api/tutorials","/api/tutorials/**").permitAll()
                 .antMatchers("/", "/*todo*/**","/*users*/**").access("hasRole('USER')").and()
                 .formLogin()
                 .loginPage("/login")