المرشحات (Filters) وسلسلة مرشحات الأمان

في هذا الدرس

explain where Spring Security sits in a web request.

الموضوعات المخطط لها

• A servlet filter is code that runs before (and after) a controller for every request.
• Spring Security adds one big filter, which holds its own ordered list of security filters: the security filter chain.
• Each filter has one job: read credentials, check a session or token, check access, handle errors.
• If a filter rejects the request, the controller never runs.
• Order matters: the first matching rule decides.