Spring security - filter

public class JwtAuthenticationFilter extends AbstractAuthenticationProcessingFilter {
    private final String HEADER_SECURITY_TOKEN = "Authorization"; 

    public JwtAuthenticationFilter(RequestMatcher matcher, AuthenticationSuccessHandler authenticationSuccessHandler, AuthenticationFailureHandler authenticationFailureHandler) {
        super(matcher);
        super.setAuthenticationSuccessHandler(authenticationSuccessHandler);
        super.setAuthenticationFailureHandler(authenticationFailureHandler);
    }
 
    @Override 
    public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException, IOException, ServletException {
        JwtAuthenticationToken jwtAuthenticationToken = null;
        
        JwtToken jwtToken = new JwtToken(request.getHeader(HEADER_SECURITY_TOKEN));
        jwtAuthenticationToken = new JwtAuthenticationToken(jwtToken, null);
        response.setHeader("Access-Control-Expose-Headers", "*");
        response.setHeader("Authorization", jwtToken.toString());
        return getAuthenticationManager().authenticate(jwtAuthenticationToken);
    }
 
    @Override
    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException {
        super.doFilter(req, res, chain);
    }

}