Thanks for the detailed blog I learned a lot. I have only 1 doubt in our JWTFilter implementation. usernamePasswordAuthenticationToken .setDetails( new WebAuthenticationDetailsSource() .buildDetails(request)); SecurityContextHolder .getContext() .setAuthentication(usernamePasswordAuthenticationToken); I am not able to understand what these two lines are doing can you explain.