OAuth2AuthorizationEndpointFilter should be applied after AuthorizationFilter in order for Multi-Factor Authentication to take effect (if configured).
Currently, MFA is not applied correctly for Authorization Server. Moving OAuth2AuthorizationEndpointFilter after AuthorizationFilter will resolve this issue.