Will Spring authentication produce an OE CPO?

[ChadThomsonPSC]

"Will Spring authentication produce an OE CPO?"

[ChadThomsonPSC]

Yes. Spring Security is always active in PAS and always produces an authentication token.
Depending on the configuration, the Spring security token can be created from an HTTP Basic login, oAuth2 JWT exchange, or could simply be an Anonymous token.

The OEClientPrincipalFilter runs immediately before the request is handed-off to the ABL session for execution, and it converts the Spring token to a Client-Principal Object (CPO), which is then made it available on the OE Session.