docs: protected Authentication extractCredentials(HttpServletRequest request) {
          String username = request.getParameter("username");
          String password = request.getParameter("password");
          UsernamePasswordAuthenticationToken credentials = new UsernamePasswordAuthenticationToken(username, password);
          credentials.setDetails(authenticationDetailsSource.buildDetails(request));
          return credentials;
      }