Spring Security allow you to model authentication at the request level.
AuthorizationFilter is the core executor to make a access decision.
The AuthorizationFilter passes the Supplier<Authentication> and the HttpServletRequest to the AuthenticationManager, which is typically the RequestMatcherDelegatingAuthenticationManager.
Authorization in Spring Security is not only applied to all requests, but all dispatches.
