This application has no explicit mapping for /error,so you are seeing this as a fallback There was an unexpected error (type=Forbidden,status=403)
解决方式:关闭跨站攻击功能 http.csrf().disable()