Good post on spring security for rest services

http://www.springboottutorial.com/securing-rest-services-with-spring-boot-starter-security