web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationProcessingFilter.java
protected void successfulAuthentication(HttpServletRequest request,
			HttpServletResponse response, FilterChain chain, Authentication authResult)
			throws IOException, ServletException {

		if (logger.isDebugEnabled()) {
			logger.debug("Authentication success. Updating SecurityContextHolder to contain: "
					+ authResult);
		}

		SecurityContextHolder.getContext().setAuthentication(authResult);

		rememberMeServices.loginSuccess(request, response, authResult);

		// Fire event
		if (this.eventPublisher != null) {
			eventPublisher.publishEvent(new InteractiveAuthenticationSuccessEvent(
					authResult, this.getClass()));
		}

		successHandler.onAuthenticationSuccess(request, response, authResult);
	}
protected void successfulAuthentication(HttpServletRequest request,
			HttpServletResponse response, FilterChain chain, Authentication authResult)
			throws IOException, ServletException {

		if (logger.isDebugEnabled()) {
			logger.debug("Authentication success. Updating SecurityContextHolder to contain: "
					+ authResult);
		}

		SecurityContextHolder.getContext().setAuthentication(authResult);

		rememberMeServices.loginSuccess(request, response, authResult);

		// Fire event
		if (this.eventPublisher != null) {
			eventPublisher.publishEvent(new InteractiveAuthenticationSuccessEvent(
					authResult, this.getClass()));
		}

		successHandler.onAuthenticationSuccess(request, response, authResult);
	}
Default behaviour for successful authentication.
<ol>
<li>Sets the successful <tt>Authentication</tt> object on the
{@link SecurityContextHolder}</li>
<li>Informs the configured <tt>RememberMeServices</tt> of the successful login</li>
<li>Fires an {@link InteractiveAuthenticationSuccessEvent} via the configured
<tt>ApplicationEventPublisher</tt></li>
<li>Delegates additional behaviour to the {@link AuthenticationSuccessHandler}.</li>
</ol>

Subclasses can override this method to continue the {@link FilterChain} after
successful authentication.
@param request
@param response
@param chain
@param authResult the object returned from the <tt>attemptAuthentication</tt>
method.
@throws IOException
@throws ServletException