Summary

We need to update our usage of OncePerRequestFilter to reflect the updates for https://github.com/spring-projects/spring-framework/issues/23196

Comment From: fhanik

After a review, here are some thoughts

HeaderWriterFilter

Should override doFilterNestedErrorDispatch since this filter should deliver headers regardless of response content

WebAsyncManagerIntegrationFilter

Should override doFilterNestedErrorDispatch since this filter, as an error filter chain may contain components relying on it

CsrfFilter

May need to override doFilterNestedErrorDispatch Error dispatches should not be handling post data, but the HTTP method may be retained

DefaultLogoutPageGeneratingFilter

May need to override doFilterNestedErrorDispatch. This filter renders HTML content on a normal dispatch. Could be mapped during an error dispatch

OAuth2AuthorizationRequestRedirectFilter

Does not need to override doFilterNestedErrorDispatch since this filter should work on a non error request. Acts like an endpoint, not a filter

BasicAuthenticationFilter

Does not need to override doFilterNestedErrorDispatch since this filter should work on a non error request.

BearerTokenAuthenticationFilter

Does not need to override doFilterNestedErrorDispatch since this filter should work on a non error request