introduce DPoPAuthenticationFilter to avoid conflict with other AuthenticationFilter (#17194)

Signed-off-by: Andrey Litvitski <[email protected]>

Author: therepanic

config/src/main/java/org/springframework/security/config/annotation/web/configurers/oauth2/server/resource/DPoPAuthenticationConfigurer.java

@@ -77,7 +77,7 @@ final class DPoPAuthenticationConfigurer<B extends HttpSecurityBuilder<B>>
 	public void configure(B http) {
 		AuthenticationManager authenticationManager = http.getSharedObject(AuthenticationManager.class);
 		http.authenticationProvider(new DPoPAuthenticationProvider(authenticationManager));
-		AuthenticationFilter authenticationFilter = new AuthenticationFilter(authenticationManager,
+		AuthenticationFilter authenticationFilter = new DPoPAuthenticationFilter(authenticationManager,
 				getAuthenticationConverter());
 		authenticationFilter.setRequestMatcher(getRequestMatcher());
 		authenticationFilter.setSuccessHandler(getAuthenticationSuccessHandler());
@@ -215,4 +215,13 @@ private static String toWWWAuthenticateHeader(Map<String, String> parameters) {
 
 	}
 
+	private static final class DPoPAuthenticationFilter extends AuthenticationFilter {
+
+		private DPoPAuthenticationFilter(AuthenticationManager authenticationManager,
+				AuthenticationConverter authenticationConverter) {
+			super(authenticationManager, authenticationConverter);
+		}
+
+	}
+
 }