Spring Security Context Authentication is null

Question

i am trying to add couple of filters in my request processing in spring boot security config.

Below is my code

 @EnableWebSecurity
 @Configuration
public class JwtSecurityConfiguration {
@Bean
public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
    http.authorizeHttpRequests(this::configureEndpoints)

    return http.build();
}
private void configureEndpoints(AuthorizeHttpRequestsConfigurer<HttpSecurity>.AuthorizationManagerRequestMatcherRegistry authorizationManagerRequestMatcherRegistry){
    authorizationManagerRequestMatcherRegistry.mvcMatchers("/permit")
            .permitAll()
            .mvcMatchers("/block")
            .denyAll()
            .and()
            .mvcMatcher("/api")
            .addFilterBefore(new Filter1(), SecurityContextHolderAwareRequestFilter.class)
            //  register TenantFilter in the chain after the SecurityContext is made available by the respective filter
            .mvcMatcher("/api")
            .addFilterAfter(new Filter2(), SecurityContextHolderAwareRequestFilter.class)
            .authorizeHttpRequests()
            .mvcMatchers("/api")
            .authenticated()
            .and();
}
}

It seems the authentication does not happen and filters are never hit.

If i try to access the authentication in my runtime code i get SecurityContextHolder.getContext().getAuthentication() as null.

Seems to some problem in the security configuration only.

Spring Security Context Authentication is null

0 Answers0