code: public WebReply determineWebReply(Subject receivedSubject, String uriName, WebRequest webRequest) {
  
          WebReply webReply = performInitialChecks(webRequest, uriName);
          if (webReply != null) {
              logAuditEntriesBeforeAuthn(webReply, receivedSubject, uriName, webRequest);
              return webReply;
          }
          AuthenticationResult authResult = authenticateRequest(webRequest);
          return determineWebReply(receivedSubject, uriName, webRequest, authResult);
      }
docs: This method does:
  1. pre-authentication checks
  2. Authentication
  3. Authorization
  
  @param receivedSubject
  @param uriName
  @param webRequest
  @return Non-null WebReply