允许用户访问多个方法spring boot

import org.springframework.web.bind.annotation.*;

@RestController
@RequestMapping("/api/user")
public class UserController {

    @GetMapping("/info")
    public String getUserInfo() {
        // 获取用户信息的逻辑
        return "User Info";
    }

    @PutMapping("/info")
    public String updateUserInfo() {
        // 更新用户信息的逻辑
        return "User Info Updated";
    }
}

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
            .antMatchers("/api/user/info").hasRole("USER")
            .antMatchers("/api/user/info").hasRole("ADMIN")
            .and().httpBasic();
    }
}

@GetMapping("/info")
public String getUserInfo() {
    return "User Info";
}

@PutMapping("/info")
public String updateUserInfo() {
    return "User Info Updated";
}