Merge remote-tracking branch 'origin/sb-3-0-13' into sb-3-0-13

# Conflicts:
#	fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatAuthenticationConfig.java

Author: rahul-chekuri

fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatAuthenticationConfig.java

@@ -93,6 +93,26 @@ AuthenticationConverter defaultAuthenticationConverter() {
   }
 
   @Bean
+  public SecurityFilterChain securityFilterChain(
+      HttpSecurity http, FiatStatus fiatStatus, AuthenticationConverter authenticationConverter)
+      throws Exception {
+    return http.servletApi()
+        .and()
+        .exceptionHandling()
+        .and()
+        .anonymous()
+        .and()
+        .addFilterBefore(
+            new FiatAuthenticationFilter(fiatStatus, authenticationConverter),
+            AnonymousAuthenticationFilter.class)
+        .build();
+  }
+
+  @Bean
+  @Order(HIGHEST_PRECEDENCE)
+  FiatAccessDeniedExceptionHandler fiatAccessDeniedExceptionHandler(
+      ExceptionMessageDecorator exceptionMessageDecorator) {
+    return new FiatAccessDeniedExceptionHandler(exceptionMessageDecorator);
   public SecurityFilterChain configure(
       HttpSecurity http, FiatStatus fiatStatus, AuthenticationConverter authenticationConverter)
       throws Exception {