From abfae0bb8ef57ad8ee942af43b03f6a96bb1850a Mon Sep 17 00:00:00 2001 From: Andrey Litvitski Date: Thu, 11 Jun 2026 21:08:01 +0300 Subject: [PATCH] Add hook for adding authentication filters This change will allow us to directly add authentication filters without resorting to various hacks by directly overriding the protected `addAuthenticationFilter` method. Closes: gh-19319 Signed-off-by: Andrey Litvitski --- .../AbstractAuthenticationFilterConfigurer.java | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/config/src/main/java/org/springframework/security/config/annotation/web/configurers/AbstractAuthenticationFilterConfigurer.java b/config/src/main/java/org/springframework/security/config/annotation/web/configurers/AbstractAuthenticationFilterConfigurer.java index 3cf0cd6ddaa..e78f5ba7a5b 100644 --- a/config/src/main/java/org/springframework/security/config/annotation/web/configurers/AbstractAuthenticationFilterConfigurer.java +++ b/config/src/main/java/org/springframework/security/config/annotation/web/configurers/AbstractAuthenticationFilterConfigurer.java @@ -56,6 +56,7 @@ * @param refers to the {@link AbstractAuthenticationProcessingFilter} that is being * built * @author Rob Winch + * @author Andrey Litvitski * @since 3.2 * @see FormLoginConfigurer */ @@ -300,6 +301,15 @@ public void configure(B http) { } this.authFilter.setSecurityContextHolderStrategy(getSecurityContextHolderStrategy()); F filter = postProcess(this.authFilter); + addAuthenticationFilter(http, filter); + } + + /** + * Adds the authentication filter + * @param http the {@link HttpSecurityBuilder} + * @param filter the authentication filter + */ + protected void addAuthenticationFilter(B http, F filter) { http.addFilter(filter); }