==============================================================================
docs/output/demo7-misordered.txt
The SAME ApiKeyAuthenticationFilter, moved from order 1201 to 4201.
The key is valid. The filter runs. The request is still rejected.
==============================================================================


--- chain ---
FilterChainProxy holds 1 SecurityFilterChain(s).
The FIRST chain whose matcher accepts the request wins; the rest are never consulted.

=== chain 1/1  matcher = any request  (12 filters)
   1/12  DisableEncodeUrlFilter                               order=100
   2/12  WebAsyncManagerIntegrationFilter                     order=600
   3/12  SecurityContextHolderFilter                          order=700
   4/12  HeaderWriterFilter                                   order=900
   5/12  LogoutFilter                                         order=1200
   6/12  BasicAuthenticationFilter                            order=3100
   7/12  RequestCacheAwareFilter                              order=3300
   8/12  SecurityContextHolderAwareRequestFilter              order=3400
   9/12  AnonymousAuthenticationFilter                        order=3700
  10/12  ExceptionTranslationFilter                           order=4000
  11/12  AuthorizationFilter                                  order=4200
  12/12  ApiKeyAuthenticationFilter                           order=? (not in the registration table)

$ curl -i -H "X-Api-Key: let-me-in" localhost:8080/whoami
HTTP/1.1 401 
