#195 avoid repeating AuthenticationFilter for /error endpoint

sts-example/src/main/java/de/adorsys/sts/example/config/SecurityConfiguration.java

@@ -34,6 +34,7 @@ protected SecurityFilterChain securityFilterChain(HttpSecurity http, TokenAuthen
                 .requestMatchers(HttpMethod.POST,
                         "/login"
                 ).permitAll()
+                .requestMatchers("/error").permitAll()
                 .anyRequest().authenticated()
         ;
 

sts-spring/src/main/java/de/adorsys/sts/filter/JWTAuthenticationFilter.java

@@ -1,39 +1,37 @@
 package de.adorsys.sts.filter;
 
 import de.adorsys.sts.token.authentication.TokenAuthenticationService;
+import jakarta.annotation.Nonnull;
 import jakarta.servlet.FilterChain;
 import jakarta.servlet.ServletException;
-import jakarta.servlet.ServletRequest;
-import jakarta.servlet.ServletResponse;
 import jakarta.servlet.http.HttpServletRequest;
-import org.slf4j.Logger;
-import org.slf4j.LoggerFactory;
+import jakarta.servlet.http.HttpServletResponse;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
 import org.springframework.security.core.Authentication;
 import org.springframework.security.core.context.SecurityContextHolder;
-import org.springframework.web.filter.GenericFilterBean;
+import org.springframework.web.filter.OncePerRequestFilter;
 
 import java.io.IOException;
 
-public class JWTAuthenticationFilter extends GenericFilterBean {
-    private static final Logger logger = LoggerFactory.getLogger(JWTAuthenticationFilter.class);
-
-    private TokenAuthenticationService tokenAuthenticationService;
+@Slf4j
+@RequiredArgsConstructor
+public class JWTAuthenticationFilter extends OncePerRequestFilter {
 
-    public JWTAuthenticationFilter(TokenAuthenticationService tokenAuthenticationService) {
-        this.tokenAuthenticationService = tokenAuthenticationService;
-    }
+    private final TokenAuthenticationService tokenAuthenticationService;
 
     @Override
-    public void doFilter(ServletRequest request, ServletResponse response, FilterChain filterChain)
-            throws IOException, ServletException {
+    public void doFilterInternal(@Nonnull HttpServletRequest request, @Nonnull HttpServletResponse response, @Nonnull FilterChain filterChain)
+            throws ServletException, IOException {
         if (logger.isTraceEnabled()) logger.trace("doFilter start");
 
         Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
         if (authentication == null) {
             if (logger.isDebugEnabled())
                 logger.debug("Authentication is null. Try to get authentication from request...");
 
-            authentication = tokenAuthenticationService.getAuthentication((HttpServletRequest) request);
+            authentication = tokenAuthenticationService.getAuthentication(request);
             SecurityContextHolder.getContext().setAuthentication(authentication);
         }