docs: protected Set<String> getAccessTokenDependencies(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) {
      Set<String> deps = new TreeSet<String>();
  
      if (getObjectDefinitionSource() != null) {
        FilterInvocation invocation = new FilterInvocation(request, response, filterChain);
        Collection<ConfigAttribute> attributes = getObjectDefinitionSource().getAttributes(invocation);
        if (attributes != null) {
          for (ConfigAttribute attribute : attributes) {
            deps.add(attribute.getAttribute());
          }
        }
      }
      return deps;
    }