Pra quem está utilizando a versão mais recente do Spring:
@Bean
public SecurityFilterChain securityFilterChain (HttpSecurity http) throws Exception {
return http.csrf(csrf -> csrf.disable())
.sessionManagement(sm -> sm.sessionCreationPolicy(SessionCreationPolicy.STATELESS))
.build();
}
