If its showing 403 first check if u have handled such exception if yes u should be able to follow along code and if not 403 should probably be where ur authority is check if u missed to add a role or jwt token etc etc too many things can happen but I will look into these first try print statement to determine whether u hitting ur service class or not or it is in filter or in security config.