Spring security configuration with pre authentication filter for ECAS

applicationContext-security.xml

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
	xmlns:security="http://www.springframework.org/schema/security"
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xsi:schemaLocation="http://www.springframework.org/schema/beans
          http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
          http://www.springframework.org/schema/security
          http://www.springframework.org/schema/security/spring-security-3.1.xsd">

	<bean id="filterChainProxy" class="org.springframework.security.web.FilterChainProxy">
		<security:filter-chain-map path-type="ant">
			<security:filter-chain pattern="/**"
				filters="ecasDetailsMigrationFilter,securityContextPersistenceFilter,logoutFilter,PreAuthenticatedProcessingFilter,etf,filterSecurityInterceptor" />
		</security:filter-chain-map>
	</bean>
	
	<bean id="securityContextPersistenceFilter"
		class="org.springframework.security.web.context.SecurityContextPersistenceFilter" />

	<bean id="PreAuthenticatedProcessingFilter"
		class="package.PreAuthenticatedProcessingFilter">
		<property name="authenticationManager" ref="authenticationManager" />
	</bean>

	<bean id="filterSecurityInterceptor"
		class="org.springframework.security.web.access.intercept.FilterSecurityInterceptor">
		<property name="authenticationManager" ref="authenticationManager" />
		<property name="accessDecisionManager" ref="accessDecisionManager" />
		<property name="securityMetadataSource">
			<security:filter-security-metadata-source lowercase-comparisons="true" use-expressions="true">
			<security:intercept-url pattern="/internal/**"
					access="hasAnyRole('ROLE_1','ROLE_2')" />
			</security:filter-security-metadata-source>
		</property>
	</bean>

	<bean id="accessDecisionManager"
		class="org.springframework.security.access.vote.AffirmativeBased">
		<property name="allowIfAllAbstainDecisions" value="false"/>
		<property name="decisionVoters">
			<list>
				<bean class="org.springframework.security.access.vote.RoleVoter"/>	
				<bean class="org.springframework.security.web.access.expression.WebExpressionVoter"/>
			</list>
		</property>
	</bean>
	
	<security:authentication-manager alias="authenticationManager">
		<security:authentication-provider
			ref="preauthAuthProvider" />
	</security:authentication-manager>
	
	<bean id="preauthAuthProvider"
		class="org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationProvider">
		<property name="preAuthenticatedUserDetailsService">
			<bean id="userDetailsServiceWrapper"
				class="org.springframework.security.core.userdetails.UserDetailsByNameServiceWrapper">
				<property name="userDetailsService" ref="userSecurityService" />
			</bean>
		</property>
	</bean>

	<bean id="logoutFilter"
		class="org.springframework.security.web.authentication.logout.LogoutFilter">
		<constructor-arg value="/logout" />
		<constructor-arg>
			<list>
				<bean
					class="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler" />
			</list>
		</constructor-arg>
		<property name="filterProcessesUrl" value="/internal/j_spring_security_logout" />
	</bean>
	
	<bean id="etf" class="org.springframework.security.web.access.ExceptionTranslationFilter">
        <property name="authenticationEntryPoint" ref="preAuthenticatedProcessingFilterEntryPoint"/>
    </bean>
    
	<bean id="preAuthenticatedProcessingFilterEntryPoint"
            class="org.springframework.security.web.authentication.Http403ForbiddenEntryPoint"/>
            
    <bean id="securityContextHolderAwareRequestFilter" class="org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter"/>
    <bean id="ecasDetailsMigrationFilter" class="package.UserMigrationFilter"/>
</beans>

pom.xml

<dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-core</artifactId>
            <version>${springSecurity.version}</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-config</artifactId>
               <version>${springSecurity.version}</version>
        </dependency>
         <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-web</artifactId>
               <version>${springSecurity.version}</version>
        </dependency>

web.xml

<!-- ECAS FILTER -->
	<filter>
		<filter-name>ECAS Filter</filter-name>
		<filter-class>package.ecas.client.filter.EcasFilter</filter-class>
	</filter>
	<!-- SPRING SECURITY FILTER -->
	<filter>
    	<filter-name>filterChainProxy</filter-name>
    	<filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class>
	</filter>
	
	<filter-mapping>
		<filter-name>ECAS Filter</filter-name>
		<url-pattern>/internal/*</url-pattern>
	</filter-mapping>
	<filter-mapping>
   	 	<filter-name>filterChainProxy</filter-name>
    	<url-pattern>/internal/*</url-pattern>
	</filter-mapping>