I have a spring boot web app with spring security configured. I want to disable authentication for a while (until needed).

I add this to the application.properties:

security.basic.enable: false management.security.enabled: false 

But I still have a basic security included : There is a default security password generated at startup and I am still getting HTTP Authentication prompt box.