Spring security adapter

Securing applications
1

Hi,
I am using Keycloak 7.0.1 and configured it with Kerberos. My application uses spring-security adapter. I have the following configuration

  @Override
  protected void configure(HttpSecurity http) throws Exception {
    super.configure(http);
    http.csrf().disable().authorizeRequests()
    .antMatchers("/js/**", "/css/**", "/vendors/**", "/images/**").permitAll()
    .antMatchers("/**").authenticated()
    .and().logout().logoutSuccessUrl("/loggedout");
  }

In my application I handled the mapping of the login/logout success url in a @Controller class

'@Controller
'@RequestMapping("/")
public class ApplicationController {

  private static final String LOGOUT = "LOGOUT";
  @Autowired
  private SecurityService securityService;
  
  '@GetMapping
  public void showView(HttpServletRequest req, HttpServletResponse resp) throws Exception {
    String currentUserName = securityService.getCurrentUserName();
    System.out.println("userName= " + currentUserName);
    req.getSession().setAttribute("currentUserName", currentUserName);
    resp.sendRedirect("HomePage");
  }
  
  '@GetMapping("/loggedout")
  public String logout() {
    return LOGOUT;
  }
}

I am asking whether this is the best practice or is there a way to handle this in the adapter configuration?