customAuthentication Filter

@Configuration
@EnableResourceServer
@EnableGlobalMethodSecurity(prePostEnabled = true)
public class ResourceServerConfiguration extends ResourceServerConfigurerAdapter {

  @Inject
  private CustomAccessDeniedHandler accessDeniedHandler;


  @Override
  public void configure(HttpSecurity http) throws Exception {
    http.authorizeRequests().antMatchers("/health").permitAll().anyRequest().authenticated()
        //allow all swagger resources,jersey and spring boot
        .antMatchers("/something*").permitAll()
        .and()
        .addFilterAfter(somefilter, AbstractPreAuthenticatedProcessingFilter.class).exceptionHandling().accessDeniedHandler(accessDeniedHandler);
  }
}



In the filter
catch (AccessDeniedException accessDeniedException) {
      ((HttpServletResponse) response).sendError(HttpServletResponse.SC_UNAUTHORIZED, "Access Denied:"+accessDeniedException.getLocalizedMessage());
      chain.doFilter(request, response);
    }