Location of OAuth2ClientContextFilter in Filter Chain

[mcgin]

Is there any reason why the OAuth2ClientContextFilter is placed after the ExceptionTranslationFilter. Could it be moved up the filter chain without any issues?

[stoicflame]

If OAuth2AccessTokenRequiredException gets thrown, the context filter needs to intercept it before it gets to the ExceptionTranslationFilter so it can redirect the user appropriately. So I think it does need to go after.

[mcgin]

Thanks stoic, I thought that might be the case