Correct your Swagger URI request matchers.
Try below.
.requestMatchers("/book/**", "/swagger-ui/**", "/swagger-ui.html", "/v3/api-docs/**", "/auth/**", "/login").permitAll()