{"record":{"id":"61ab6d0682229ca1","repo":"spring-projects/spring-security","slug":"couldn-t-find-filterchainproxy-in-filters","errorCode":null,"errorMessage":"Couldn't find FilterChainProxy in \" + filters","messagePattern":"Couldn't find FilterChainProxy in \" \\+ filters","errorType":"exception","errorClass":"IllegalStateException","httpStatus":null,"severity":"error","filePath":"config/src/main/java/org/springframework/security/config/annotation/web/configuration/WebMvcSecurityConfiguration.java","lineNumber":225,"sourceCode":"\t\t\treturn delegate;\n\t\t}\n\n\t\t/**\n\t\t * Find the FilterChainProxy in a List of Filter.\n\t\t * @param filters\n\t\t * @return non-null FilterChainProxy\n\t\t * @throws IllegalStateException if the FilterChainProxy cannot be found\n\t\t */\n\t\tprivate static FilterChainProxy findFilterChainProxy(List<? extends Filter> filters) {\n\t\t\tfor (Filter filter : filters) {\n\t\t\t\tif (filter instanceof FilterChainProxy fcp) {\n\t\t\t\t\treturn fcp;\n\t\t\t\t}\n\t\t\t\tif (filter instanceof DebugFilter debugFilter) {\n\t\t\t\t\treturn debugFilter.getFilterChainProxy();\n\t\t\t\t}\n\t\t\t}\n\t\t\tthrow new IllegalStateException(\"Couldn't find FilterChainProxy in \" + filters);\n\t\t}\n\n\t}\n\n}\n","sourceCodeStart":207,"sourceCodeEnd":231,"githubUrl":"https://github.com/spring-projects/spring-security/blob/96852e8860138a482cb13d1479573f24ff6443c6/config/src/main/java/org/springframework/security/config/annotation/web/configuration/WebMvcSecurityConfiguration.java#L207-L231","documentation":"findFilterChainProxy() scans the application's Filter list looking for the FilterChainProxy instance Spring Security registers (also unwrapping DebugFilter). This IllegalStateException is a configuration/bootstrap sanity check: it means the filter chain contains no FilterChainProxy at all, i.e. the Spring Security filter infrastructure was not registered as expected (for example springSecurityFilterChain is missing from the filter list). It is raised while CompositeFilterChainProxy initializes, so the security setup cannot proceed.","triggerScenarios":"Thrown at config/src/main/java/org/springframework/security/config/annotation/web/configuration/WebMvcSecurityConfiguration.java:225 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Ensure Spring Security is configured via @EnableWebSecurity / WebSecurityConfiguration so the springSecurityFilterChain (FilterChainProxy) bean is created and registered as a filter","Verify the DelegatingFilterProxy registration includes the FilterChainProxy in the filter list passed to CompositeFilterChainProxy","If using Spring Security's DebugFilter, confirm it wraps a properly built FilterChainProxy rather than replacing it","Check that no custom filter configuration excludes or removes the security filter from the composite"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"96852e8860138a482cb13d1479573f24ff6443c6","analyzedAt":"2026-09-10T23:25:23.477Z","contentChangedAt":"2026-09-10T23:25:23.477Z","schemaVersion":2},"datasetVersion":"2026-09-14T11:17:12.474Z"}