The PathPatternRequestMatcher has been introduced since spring security 6.5. However the equals() method only takes into account the pattern, while extra criteria exists like method, servlet path.