Is the flow of AuthorizationFilter.class incorrect? No FilterInvocation. https://docs.spring.io/spring-security/reference/5.7.4/servlet/authorization/authorize-http-requests.html(the picture)