Issue creating oauth path.

I have a specific path that i want to have oauth and for all the other paths to not. What i mean by that is I want /app/test/** to have my oAuth protected code, and the rest to not. So, I've tried to do the following in numerous amounts of ways, but to no success:

Code:

---

<http pattern="/**" security="none" />

<http entry-point-ref="oAuthEntryPoint">
    <intercept-url pattern="/app/test/**" access="IS_AUTHENTICATED_FULLY"/>
</http>

---

Any help would be much appreciated :)

A few things

* HTTP blocks are considered in order (just as intercept-url elements are), so you will want the least specific at the bottom. In this instance you will want to switch the the order of the two blocks.
* You do not need to explicitly state that pattern="/**" since that is the default if no pattern is specified (although this is more explicit so if you like you can also keep it)