Closed
Description
The documentation for Spring Security, section Servlet Architecture -> Architecture mentions the following:
"The RequestCacheAwareFilter uses the RequestCache to save the HttpServletRequest."
The statement above is incorrect, because the RequestCacheAwareFilter uses the RequestCache to get the saved HttpServletRequest after the user authenticates, while the ExceptionTranslationFilter uses the RequestCache to save the HttpServletRequest after the user requested protected resource in an unauthenticated request.
https://docs.spring.io/spring-security/reference/servlet/architecture.html#requestcacheawarefilter