Proccesing Filter does not set authentication - spring

Question

I am new to Spring Security. Now I'm trying to implement a custom filter, for a start I decided to simply create one filled UserPasswordAuthenticationToken object first and pass it to the provider, an object of the same class but with rights is simply created there. When requesting a protected resource, a redirect occurs with an error to the login endpoint and Anonymous is set in the SecurityContextHolder. I don’t know what to do, because apart from the fact that authentication failed, I don’t get anything to solve the problem
Log from server start to request for a protected resource
INFO 7454 --- [ main] o.s.b.w.embedded.tomcat.TomcatWebServer : Tomcat started on port(s): 8080 (http) with context path ''
INFO 7454 --- [ main] c.c.server.TestserveroauthApplication : Started
TestserveroauthApplication in 1.853 seconds (process running for 2.142)
INFO 7454 --- [nio-8080-exec-2] o.a.c.c.C.[Tomcat].[localhost].[/] : Initializing Spring DispatcherServlet 'dispatcherServlet'
INFO 7454 --- [nio-8080-exec-2] o.s.web.servlet.DispatcherServlet : Initializing Servlet 'dispatcherServlet'
INFO 7454 --- [nio-8080-exec-2] o.s.web.servlet.DispatcherServlet : Completed initialization in 1 ms
DEBUG 7454 --- [nio-8080-exec-2] o.s.security.web.FilterChainProxy : Securing GET /
DEBUG 7454 --- [nio-8080-exec-2] o.s.s.w.a.AnonymousAuthenticationFilter : Set SecurityContextHolder to anonymous SecurityContext
DEBUG 7454 --- [nio-8080-exec-2] o.s.s.w.a.i.FilterSecurityInterceptor : Failed to authorize filter invocation [GET /] with attributes [authenticated]
DEBUG 7454 --- [nio-8080-exec-2] o.s.s.w.s.HttpSessionRequestCache : Saved request http://localhost:8080/?continue to session
DEBUG 7454 --- [nio-8080-exec-2] o.s.s.w.a.Http403ForbiddenEntryPoint : Pre-authenticated entry point called. Rejecting access
DEBUG 7454 --- [nio-8080-exec-2] o.s.security.web.FilterChainProxy : Securing GET /error
DEBUG 7454 --- [nio-8080-exec-2] o.s.s.w.a.AnonymousAuthenticationFilter : Set SecurityContextHolder to anonymous SecurityContext
DEBUG 7454 --- [nio-8080-exec-2] o.s.s.w.a.i.FilterSecurityInterceptor : Failed to authorize filter invocation [GET /error] with attributes [authenticated]
DEBUG 7454 --- [nio-8080-exec-2] o.s.s.w.s.HttpSessionRequestCache : Saved request http://localhost:8080/error?continue to session
DEBUG 7454 --- [nio-8080-exec-2] o.s.s.w.a.Http403ForbiddenEntryPoint : Pre-authenticated entry point called. Rejecting access
My authentication filter
public class CustomAuthFilter extends AbstractAuthenticationProcessingFilter {
private static final AntPathRequestMatcher DEFAULT_ANT_PATH_REQUEST_MATCHER = new AntPathRequestMatcher("/login",
"GET");
public CustomAuthFilter() {
super(DEFAULT_ANT_PATH_REQUEST_MATCHER);
}
#Override
public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response)
throws AuthenticationException, IOException, ServletException {
UsernamePasswordAuthenticationToken authRequest = new UsernamePasswordAuthenticationToken("testuser", "testpass");
setDetails(request, authRequest);
return getAuthenticationManager().authenticate(authRequest);
}
protected void setDetails(HttpServletRequest request, UsernamePasswordAuthenticationToken authRequest) {
authRequest.setDetails(this.authenticationDetailsSource.buildDetails(request));
}
}
My authentication provider
public class CustomAuthProvider implements AuthenticationProvider{
protected MessageSourceAccessor messages = SpringSecurityMessageSource.getAccessor();
#Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
UsernamePasswordAuthenticationToken authRequest = (UsernamePasswordAuthenticationToken) authentication;
if(authRequest.getCredentials() == null || authRequest.getPrincipal() == null) {
throw new BadCredentialsException(this.messages
.getMessage("AbstractUserDetailsAuthenticationProvider.badCredentials", "Bad credentials"));
}
List<GrantedAuthority> grantedAuthorities = new ArrayList<GrantedAuthority>();
grantedAuthorities.add(new SimpleGrantedAuthority("USER"));
UsernamePasswordAuthenticationToken authResponse = new UsernamePasswordAuthenticationToken(
authRequest.getPrincipal(),
authRequest.getCredentials(),
grantedAuthorities
);
authResponse.setDetails(authRequest.getDetails());
return authResponse;
}
#Override
public boolean supports(Class<?> authentication) {
return (UsernamePasswordAuthenticationToken.class.isAssignableFrom(authentication));
}
}
My configuration
#Configuration
public class SecurityConfig {
#Bean
public CodeFilter customFilter(){
CodeFilter authenticationFilter = new CodeFilter();
authenticationFilter.setAuthenticationManager(new SimpleAuthenticationManager(new CodeProvider()));
return authenticationFilter;
}
#Bean
public SecurityFilterChain defaultSecurityFilterChain(HttpSecurity http) throws Exception {
http
.authorizeRequests(authorize -> authorize
.anyRequest().authenticated()
)
.addFilterBefore(customFilter(), UsernamePasswordAuthenticationFilter.class);
return http.build();
}
}
My authentication manager (just a wrapper over the authentication provider)
public class SimpleAuthenticationManager implements AuthenticationManager{
private AuthenticationProvider authenticationProvider;
public SimpleAuthenticationManager(AuthenticationProvider authenticationProvider) {
this.authenticationProvider = authenticationProvider;
}
#Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
return authenticationProvider.authenticate(authentication);
}
}