..

src/main/java/com/izouma/nineth/security/WebSecurityConfig.java

@@ -176,7 +176,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
                 .antMatchers("/tradeAuctionOrder/all").permitAll()
                 .antMatchers("/metaVisitor/save").permitAll()
                 .antMatchers("/gpt3/**").permitAll()
-                .antMatchers("/**/findSwitch").permitAll()
+                .antMatchers("/metaSwitch/*/findSwitch").permitAll()
                 // all other requests need to be authenticated
                 .anyRequest().authenticated().and()
                 // make sure we use stateless session; session won't be used to