When testing a REST service with a verb different than "GET" on an URL requiring authentication, a redirection is made to the basic auth controller but specifying the GET verb.
Because of that, an infinite loop would be caused but is actually stopped thanks to a limit protection.