# Spring Boot Multiple security configurations needed?

**URL:** <https://forum.flowable.org/t/spring-boot-multiple-security-configurations-needed/2149>\
**Category:** Flowable Engine\
**Created:** [June 21, 2018, 10:25am UTC](https://forum.flowable.org/t/spring-boot-multiple-security-configurations-needed/2149 "2018-06-21T10:25:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bdot](https://avatars.discourse-cdn.com/v4/letter/b/e19adc/32.png) [@bdot](https://forum.flowable.org/u/bdot)\
**Post date:** [June 21, 2018, 10:25am UTC](https://forum.flowable.org/t/spring-boot-multiple-security-configurations-needed/2149/1 "2018-06-21T10:25:51Z")

</div>

Hi Guys, Just want to quickly check if anyone of you can help me understand why multiple Security Configurations are needed in this [https://github.com/flowable/flowable-engine/blob/17af19649d9c8d09aa3289c8bda6358ecdab8d2f/modules/flowable-spring-boot/flowable-spring-boot-samples/flowable-spring-boot-sample-rest-api-security/src/main/java/flowable/Application.java](https://github.com/flowable/flowable-engine/blob/17af19649d9c8d09aa3289c8bda6358ecdab8d2f/modules/flowable-spring-boot/flowable-spring-boot-samples/flowable-spring-boot-sample-rest-api-security/src/main/java/flowable/Application.java)

Thanks for your time!

---

<div class="post-metadata">

**Author:** ![joram](https://yyz1.discourse-cdn.com/flex035/user_avatar/forum.flowable.org/joram/32/26_2.png) [@joram](https://forum.flowable.org/u/joram)\
**Post date:** [June 26, 2018, 8:12am UTC](https://forum.flowable.org/t/spring-boot-multiple-security-configurations-needed/2149/2 "2018-06-26T08:12:20Z")

</div>

One is for the REST API that the UI uses (uses cookie authentication) and the other one is for the ‘regular’ REST API (uses basic auth).

---

<div class="post-metadata">

**Author:** ![bdot](https://avatars.discourse-cdn.com/v4/letter/b/e19adc/32.png) [@bdot](https://forum.flowable.org/u/bdot)\
**Post date:** [July 1, 2018, 1:58pm UTC](https://forum.flowable.org/t/spring-boot-multiple-security-configurations-needed/2149/3 "2018-07-01T13:58:57Z")

</div>

I see. Thanks for the clarification @joram
