Spring Security - provider

@Component
@SuppressWarnings("unchecked")
public class JwtAuthenticationProvider implements AuthenticationProvider {
    // private JwtTokenUtil jwtTokenUtil;
    @Autowired private JwtTokenUtil jwtTokenUtil;
    @Autowired private AuthorityRepository authorityRepository;

    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        // jwtTokenUtil = new JwtTokenUtil();
        JwtToken jwtToken = (JwtToken) authentication.getPrincipal();
        Claims claims = null;
        try{
            claims = jwtTokenUtil.parseToken(jwtToken);
            jwtToken.setUsername((String)claims.get("username"));
            jwtToken.setPassword((String)claims.get("password"));
        }catch(ExpiredJwtException e){
            throw new ExpiredTokenException(e.getMessage());
        }catch(Exception e){
            throw new InvalidTokenException(e.getMessage());
        }

        SecurityContextHolder.getContext().setAuthentication(authentication);
        //exp date check
        return authentication;
    }


    @Override
    public boolean supports(Class<?> authentication) {
        return authentication.equals(JwtAuthenticationToken.class);
    }
}