Public endpoints still require authentication in BFF → Gateway → Resource Server (Spring Security, OAuth2)

spring-security oauth-2.0 openid-connect spring-cloud-gateway backend-for-frontend