docs: protected DmfTenantSecurityToken createTenantSecruityTokenVariables(final HttpServletRequest request) {
          final String requestURI = request.getRequestURI();
  
          if (pathExtractor.match(request.getContextPath() + CONTROLLER_REQUEST_ANT_PATTERN, requestURI)) {
              LOG.debug("retrieving principal from URI request {}", requestURI);
              final Map<String, String> extractUriTemplateVariables = pathExtractor
                      .extractUriTemplateVariables(request.getContextPath() + CONTROLLER_REQUEST_ANT_PATTERN, requestURI);
              final String controllerId = extractUriTemplateVariables.get(CONTROLLER_ID_PLACE_HOLDER);
              final String tenant = extractUriTemplateVariables.get(TENANT_PLACE_HOLDER);
              if (LOG.isTraceEnabled()) {
                  LOG.trace("Parsed tenant {} and controllerId {} from path request {}", tenant, controllerId,
                          requestURI);
              }
              return createTenantSecruityTokenVariables(request, tenant, controllerId);
          } else if (pathExtractor.match(request.getContextPath() + CONTROLLER_DL_REQUEST_ANT_PATTERN, requestURI)) {
              LOG.debug("retrieving path variables from URI request {}", requestURI);
              final Map<String, String> extractUriTemplateVariables = pathExtractor.extractUriTemplateVariables(
                      request.getContextPath() + CONTROLLER_DL_REQUEST_ANT_PATTERN, requestURI);
              final String tenant = extractUriTemplateVariables.get(TENANT_PLACE_HOLDER);
              if (LOG.isTraceEnabled()) {
                  LOG.trace("Parsed tenant {} from path request {}", tenant, requestURI);
              }
              return createTenantSecruityTokenVariables(request, tenant, "anonymous");
          } else {
              if (LOG.isTraceEnabled()) {
                  LOG.trace("request {} does not match the path pattern {}, request gets ignored", requestURI,
                          CONTROLLER_REQUEST_ANT_PATTERN);
              }
              return null;
          }
      }