Thanks the issues came from from the annotation processing! I changed @EnableWebSecurity by @EnableMethodSecurity and now it works!
@EnableWebSecurity
@EnableMethodSecurity