D-Net

        HttpServletRequest request = (HttpServletRequest) req;

        String token = utils.getToken(request);

        if (token != null) {

            Authentication auth = authorizationProvider.getAuthentication(token);

            SecurityContextHolder.getContext().setAuthentication(auth);

        }

        filterChain.doFilter(req, res);

    }

import org.springframework.security.config.annotation.web.builders.HttpSecurity;

import org.springframework.security.web.DefaultSecurityFilterChain;

import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;

public class AuthorizationFilterConfigurer extends SecurityConfigurerAdapter<DefaultSecurityFilterChain, HttpSecurity> {

    @Override

    public void configure(HttpSecurity http) throws Exception {

        AuthorizationFilter customFilter = new AuthorizationFilter(authorizationProvider, utils);

    }

}

import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

import org.springframework.security.config.http.SessionCreationPolicy;

@EnableWebSecurity

@ComponentScan(basePackages = {"eu.dnetlib.uoaauthorizationlibrary.*"})

public class WebSecurityConfig extends WebSecurityConfigurerAdapter {

    public void addCorsMappings(CorsRegistry registry) {

        registry.addMapping("/**")

                .allowedMethods("GET", "POST", "PUT", "DELETE", "HEAD", "OPTIONS")

                .allowCredentials(true);

    }

}