Using Vue.js, I'm trying to implement a JWT login form in a RESTful API using Spring Boot, but unless I add the bearer token to the request, all I get is a 403 status. I have set up the endpoint to be accessible without any permission and on postman the request can be sent without the authorization header. This is part of my security configuration on Spring:

.antMatchers(HttpMethod.POST, "/auth/login")
.permitAll()

This is my vue.js service that makes the POST request:

import axios from 'axios'


let USER_API_BASE_URL = 'http://localhost:8080/auth/login/'
let config = {
    headers: {
    'Content-Type': 'application/json',
    'Authorization': "Bearer (hereGoesTheToken)"
    }}

class LoginService{
    postLogin(emailInput, passwordInput){
        let user = JSON.stringify({email: emailInput, password: passwordInput});
        var response = axios.post(USER_API_BASE_URL, user, config);
        console.log(response)
        return response
    }
}

export default new LoginService()

I want to make this so that a token is not required to access the part where you requested the same token... Is there any way to do this?