I see this in my Spring MVC app\'s web.xml
:
springSecurityFilterCh
Its been a long time but I had the same question and I found this: https://www.javacodegeeks.com/2013/11/spring-security-behind-the-scenes.html
I tried to run my spring security project by removing the filter in question and also by adding it. What I found is if we add the filter, only then the call will redirect to required login page as defined in the spring-security configuration.
Hence, agreeing to @Ryan's answer.