Summary
We need to update our usage of OncePerRequestFilter to reflect the updates for https://github.com/spring-projects/spring-framework/issues/23196
Comment From: fhanik
After a review, here are some thoughts
HeaderWriterFilter
Should override doFilterNestedErrorDispatch since this filter should deliver headers regardless of response content
WebAsyncManagerIntegrationFilter
Should override doFilterNestedErrorDispatch since this filter, as an error filter chain may contain components relying on it
CsrfFilter
May need to override doFilterNestedErrorDispatch Error dispatches should not be handling post data, but the HTTP method may be retained
DefaultLogoutPageGeneratingFilter
May need to override doFilterNestedErrorDispatch. This filter renders HTML content on a normal dispatch. Could be mapped during an error dispatch
OAuth2AuthorizationRequestRedirectFilter
Does not need to override doFilterNestedErrorDispatch since this filter should work on a non error request. Acts like an endpoint, not a filter
BasicAuthenticationFilter
Does not need to override doFilterNestedErrorDispatch since this filter should work on a non error request.
BearerTokenAuthenticationFilter
Does not need to override doFilterNestedErrorDispatch since this filter should work on a non error request