<http pattern="/log/**" use-expressions="true" name="restSecurityFilterChain" create-session="stateless">
    <http-basic/>
    <intercept-url pattern="/**" access="hasRole('ROLE_USER')"/>
    <csrf disabled="true"/>
</http>

<authentication-manager>
    <authentication-provider ref="userService">
    </authentication-provider>
</authentication-manager>

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    String name = authentication.getName();
    String password = authentication.getCredentials().toString();

    User user = repository.getByNameAndPass(name, password);
    if (user == null) {
        name = "NotAuthorised";
        password = "";
    }
    List<GrantedAuthority> grantedAuths = new ArrayList<>();
    grantedAuths.add(new SimpleGrantedAuthority("ROLE_USER"));
    Authentication auth = new UsernamePasswordAuthenticationToken(name, password, grantedAuths);
    return auth;
}

@Override
public boolean supports(Class<?> authentication) {
    return authentication.equals(UsernamePasswordAuthenticationToken.class);
}

@RequestMapping(value = "/log", method = RequestMethod.GET)
public ResponseEntity<Map<String,Object>>  getAll(@RequestParam(value = "page", required = false) Integer page,
                                 @RequestParam(value = "size", required = false) Integer size) {

    Map<String, Object> resultMap = new HashMap<>();
    String loggedUser = userService.getLoggedUser();
    if ("NotAuthorised".equals(loggedUser)) {
        LOG.info("authtoriation error");
        resultMap.put("message","Access denied");
        return new ResponseEntity<>(resultMap, HttpStatus.UNAUTHORIZED);
    }

    LOG.info("getAll for logmessages ");
    resultMap.put("logs", logMessageService.getLogMessagesDT(logMessageService.getPage(page == null ? 0 :
            page.intValue(), size == null ? 0 : size.intValue())) );

    return new ResponseEntity<>(resultMap, HttpStatus.OK);
}

return new ResponseEntity<>(resultMap, HttpStatus.UNAUTHORIZED);