AbstractAuthenticationProcessingFilter내에서 HttpServletResponse값이 안들어갑니다

	@Bean
	public SecurityFilterChain httpSecurity(HttpSecurity http) throws Exception {
		return http.cors().disable()
			.csrf().disable()
			.httpBasic().disable()
			.formLogin().disable()
			.authorizeRequests().anyRequest().authenticated()
			.and()
			.addFilterAt(authFilter(), UsernamePasswordAuthenticationFilter.class)
			.addFilterAt(jwtFilter(), UsernamePasswordAuthenticationFilter.class)
			.build();
	}

	@Bean
	public WebSecurityCustomizer webSecurityCustomizer() {
		return web -> {
			web.ignoring().requestMatchers().antMatchers("/h2/**");
		};
	}


	@Bean
	public AuthFilter authFilter() throws Exception {
		var authFilter = new AuthFilter();
		authFilter.setAuthenticationManager(authenticationConfiguration.getAuthenticationManager());
		authFilter.setAuthenticationSuccessHandler(new SimpleUrlAuthenticationSuccessHandler("/"));
		authFilter.setAuthenticationFailureHandler(new SimpleUrlAuthenticationFailureHandler("/error"));

		return authFilter;
	}

설정은 위와 같이 했습니다.

@Override
protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response, FilterChain chain,
   Authentication authResult) throws IOException, ServletException {
   super.successfulAuthentication(request, response, chain, authResult);
   String SECRET = "secrsdkfjhjh4243j234jh2SDdsfjhgsdfhjgjFQQQQdasd1et";
   Claims claims = Jwts.claims();
   claims.put("username", SecurityContextHolder.getContext().getAuthentication().getName());
   String compact = Jwts.builder()
      .setClaims(claims)
      .setIssuedAt(new Date(System.currentTimeMillis()))
      .setExpiration(new Date(System.currentTimeMillis() + 1000 * 60 * 60 * 10)) // 1시간
      .signWith(SignatureAlgorithm.HS256, SECRET)
      .compact();

   response.addHeader("Authorization", compact);
   response.addCookie(new Cookie("token", compact));
}

위와 같이 설정을 했는데 http 요청 테스트를 해보면 설정한 값이 하나도 들어가 있지않습니다.

컨트롤러나 OncePerRequestFilter에서 값을 넣어보면 잘 적용됩니다..

@Override
protected void successfulAuthentication(HttpServletRequest request, HttpServletResponse response, FilterChain chain,
   Authentication authResult) throws IOException, ServletException {

   super.successfulAuthentication(request, response, chain, authResult); // <-- 이 부분
   String SECRET = "secrsdkfjhjh4243j234jh2SDdsfjhgsdfhjgjFQQQQdasd1et";
   Claims claims = Jwts.claims();
   // ... 생략
}