docs: @SuppressWarnings("unused")
      public HttpSecurity configure(HttpSecurity http) throws Exception {
          return http
                  .authenticationProvider(provider)
                  .securityContext()
                  .securityContextRepository(new BearerSecurityContextRepository())
                  .and()
                  .exceptionHandling()
                  .authenticationEntryPoint(new JwtAuthenticationEntryPoint())
                  .and()
                  .httpBasic().disable()
                  .csrf().disable()
                  .sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS).and();
      }