apollo-biz/src/main/java/com/ctrip/framework/apollo/biz/auth/WebSecurityConfig.java/WebSecurityConfig/configure
class WebSecurityConfig:  @Override
  protected void configure(HttpSecurity http) throws Exception {
    http.httpBasic();
    http.csrf().disable();
    http.headers().frameOptions().sameOrigin();
  }