I’m using spring-security 6 to implement custom authentication. Actual authentication is based on signature which is sent in a header. Therefore I have tried to implement a sample to get the structure working. Below are my code.

https://github.com/mayuraviraj/springboot-custom-authentication-provider-master/tree/main

In this code EverybodyAuthenticationFilter send hardcoded token just for testing. Therefore my understanding is this should work for all the requests. However I get 403 error. I came across following discussion where it says with spring-security 6 custome authentication provider works differently.

https://github.com/spring-projects/spring-security/issues/12602

How can i get this to work ?