SeniorSenior (6–10 yrs)JavaSpring BootAmazonPayPalOracle
Spring Security filter chain
How does Spring Security's filter chain authenticate an API request with JWT?
Answers use simple, clear English.
Quick interview answer
A OncePerRequestFilter extracts the Bearer token, validates signature/claims, builds an Authentication, and sets it in SecurityContextHolder. Authorization rules (authorizeHttpRequests) then decide access. Stateless APIs disable sessions (SessionCreationPolicy.STATELESS).
Detailed answer
A OncePerRequestFilter extracts the Bearer token, validates signature/claims, builds an Authentication, and sets it in SecurityContextHolder. Authorization rules (authorizeHttpRequests) then decide access. Stateless APIs disable sessions (SessionCreationPolicy.STATELESS).
seniortech-lead#security#jwt