Hi, if I want to secure the root directory, namely, when I visit http://localhost:8080/myapp, then it redirects me to the keycloak login page, asking for credentials. How to achieve that?

I modified the Web.xml as follows, but it doesn't secure anything at all. I thought this should work "<url-pattern>/*</url-pattern>", but it doesn't. 


<!-- 
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>Admins</web-resource-name>
            <url-pattern>/admin/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>admin</role-name>
        </auth-constraint>
    </security-constraint>
    <security-constraint>
        <web-resource-collection>
            <web-resource-name>Login</web-resource-name>
            <url-pattern>/login2/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
            <role-name>user</role-name>
        </auth-constraint>
    </security-constraint>
 -->
    
    <security-constraint>
        <web-resource-collection>
        <web-resource-name>Web Root</web-resource-name>
            <url-pattern>/*</url-pattern>
        </web-resource-collection>
      
 <!-- 
        <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
         -->
    </security-constraint>

    <login-config>
        <auth-method>KEYCLOAK</auth-method>
        <realm-name>bword</realm-name>
    </login-config>