docs: protected void doTokenAuth(AuthToken token, HttpServletRequest request, HttpServletResponse response,
              FilterChain chain) throws IOException, ServletException {
          AuthPrincipal principal = new AuthPrincipal(token.getPrincipal());
          principal.addRoles(token.getRoles());
          doFilterChain(request, response, chain, principal);
      }