Finally, I see the log "2023-01-29 15:00:47,966 DEBUG [org.apereo.cas.web.security.CasWebSecurityConfigurerAdapter] - <Configuring protocol endpoints [[/login**, /login/**, /logout**, /logout/**, /validate**, /validate/**, /serviceValidate**, /serviceValidate/**, /p3/serviceValidate**, /p3/serviceValidate/**, /proxyValidate**, /proxyValidate/**, /p3/proxyValidate**, /p3/proxyValidate/**, /proxy**, /proxy/**, /oauth2.0**, /oauth2.0/**, /v1**, /v1/**, /webjars/**, /themes/**, /js/**, /css/**, /images/**, /static/**, /error, /favicon.ico]] to exclude/ignore from http security>". Spring security filter this endpoint. It return to normal after I change testcontroller to login.