Java 当web.xml中存在静态文件映射时，Spring安全性将失败

我将SpringSAML与OKTA和JSF一起使用。 当我为静态文件添加任何servlet映射时，我看不到在从OKTA重定向后，

org.springframework.security.saml.SAMLProcessingFilter

被执行，甚至在/saml/SSO页面上也是如此。我从我的申请表上得到了404，仅此而已

<servlet-mapping>
    <servlet-name>default</servlet-name>
    <url-pattern>*.css</url-pattern>
</servlet-mapping>

<servlet-mapping>
    <servlet-name>default</servlet-name>
    <url-pattern>*.jpg</url-pattern>
</servlet-mapping>

<servlet-mapping>
    <servlet-name>default</servlet-name>
    <url-pattern>*.png</url-pattern>
</servlet-mapping>

弹簧日志：

18:23:23.496[http-apr-80-exec-10]调试o.s.s.s.c.SAMLContextProviderImpl-未指定IDP，使用默认值http://www.okta.com/exk6fkmm7e84LEY4W0h7
18:23:23.496[http-apr-80-exec-10]调试o.s.security.saml.util.SAMLUtil-未指定AssertionConsumerService的索引，返回默认值
18:23:23.496[http-apr-80-exec-10]调试o.s.security.saml.SAMLEntryPoint-使用WebSO配置文件处理SSO
18:23:23.497[http-apr-80-exec-10]调试o.s.s.saml.websso.WebSSOProfileImpl-使用绑定urn:oasis:names:tc:saml:2.0:bindings:http-POST的默认使用者服务
18:23:23.524[http-apr-80-exec-10]调试o.s.security.saml.util.slf4jlogsleet-ResourceManager:found/templates/saml2-post-binding.vm with loader org.apache.velocity.runtime.resource.loader.ClasspathResourceLoader
18:23:23.524[http-apr-80-exec-10]调试o.s.security.saml.util.slf4jlogsleet-ResourceManager:found/templates/add-html-head-content.vm with loader org.apache.velocity.runtime.resource.loader.ClasspathResourceLoader
18:23:23.525[http-apr-80-exec-10]调试o.s.security.saml.util.slf4jlogsleet-ResourceManager:found/templates/add-html-body-content.vm with loader org.apache.velocity.runtime.resource.loader.ClasspathResourceLoader
18:23:23.525[http-apr-80-exec-10]调试o.s.s.s.s.storage.HttpSessionStorage-将消息a4c93jc724eg7e2f25i81c6a80hb481存储到会话D29095A9F7979F9357419777D41EE2E
18:23:23.525[http-apr-80-exec-10]INFO o.s.s.saml.log.SAMLDefaultLogger-AuthNRequest；成功；127.0.0.1;http://trucksapp:80/saml/metadata;http://www.okta.com/exk6fkmm7e84LEY4W0h7;;;

<security:http security="none" pattern="/favicon.ico"/>
<security:http security="none" pattern="/images/**"/>
<security:http security="none" pattern="/css/**"/>
<security:http security="none" pattern="/resources/**"/>
<security:http security="none" pattern="/javax.faces.resource/**"/>
<security:http security="none" pattern="/logout.jsp"/>