https://docs.spring.io/spring-security/reference/servlet/architecture.html

Request → DelegatingFilterProxy → FilterChainProxy → SecurityFilterChain

Default Security Filter Chain