beginnerFoundations: What Is Security, and Why Should You Care?
What happens if a filter doesn't call chain.doFilter()?
The request processing stops right there — no further filter, and no servlet/controller, will ever execute for that request. This is exactly how Spring Security filters reject unauthenticated or unauthorized requests early: for example, ExceptionTranslationFilter catches an AuthenticationException and commits a 401 response without ever calling chain.doFilter() further down the chain.
Ready to master this question?
Generate a complete walkthrough — background, the full answer in plain language, a working code example explained line by line, a real-world scenario, common mistakes, and how this same question gets asked in different ways.
Sign in to generate a response