Left task Enable csrf Add CORS Filter Add Custom AuthenticationProvider Finish Config method under SecurityConfig class Make RefreshToken api