spring security配置，提示A universal match pattern ('/**'）错误

Question

我的配置大概如下：
<http pattern="/css/**" security="none"/>
<http pattern="/login1.jsp*" security="none"/> <!-- 避免死循环 -->

<http >
    <intercept-url pattern="/test/**" access="hasRole('ROLE_ADMIN')" />
    <csrf disabled="true"/>  <!-- 关闭掉跨域保护，如果打开，登录页面需要生产随机token -->
    <form-login login-page="/login1.jsp"  />
    <logout logout-url="/logout1" logout-success-url="/"/>  
</http>

 <http  entry-point-ref="restAuthenticationEntryPoint">
     <intercept-url pattern="/test2/**" access="hasRole('ROLE_ADMIN')" />
     <intercept-url pattern="/**" access="hasRole('ROLE_USER')" />
    <csrf disabled="true"/>  
    <form-login login-page="/login1.jsp"  />
    <logout logout-url="/logout1" logout-success-url="/"/>  
</http>

问题描述

启动时提示下面错误：

Caused by: java.lang.IllegalArgumentException: A universal match pattern ('/**') is defined before other patterns in the filter chain, causing them to be ignored. Please check the ordering in your <security:http> namespace or FilterChainProxy bean configuration

我都没有配置 /** 这个是什么原因呢？我的配置哪里出问题了？

Answer 1

社区不活跃啊，没人回答，关闭。