title: OIDC filter for legacy servlet application
body: <p>I would like to intercept request to a legacy Java servlet/JSP application, and authenticate users with the OpenID Connect (OIDC) protocol.</p>
  
  <p>I have seen examples with Spring Security and SAML where the <code>springSecurityFilterChain</code> was configured explicitly in XML and wrapped existing non-Spring servlets.  But most of the Java OIDC examples I've seen have been with Spring Boot, which is not an option for me. (for example: <a href="https://developer.okta.com/blog/2017/12/18/spring-security-5-oidc" rel="noreferrer">https://developer.okta.com/blog/2017/12/18/spring-security-5-oidc</a>) </p>
  
  <p>Can you point me at any non-Spring Boot examples that use OIDC clients in Java webapps?</p>