Security related exceptions do not send responses back to the client about dvdapplication HOT 3 OPEN

// Authentication Entrypoint
@Component
public class MyBasicAuthenticationEntryPoint implements AuthenticationEntryPoint {
    private static Logger log = LoggerFactory.getLogger("Exception Handler");
    @Override
    public void commence(
            HttpServletRequest request, HttpServletResponse response, AuthenticationException authEx)
            throws IOException{

        PrintWriter writer = response.getWriter();
        response.addHeader("WWW-Authenticate", "Basic realm= DVD-Store");
        response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
        response.setContentType("text/plain");

        log.warn("INSIDEEE");
        if ( authEx instanceof BadCredentialsException) {
            log.warn("bad cred");
            writer.println("HTTP Status 401 - " + " Provided credentials are invalid");
        }
        if ( authEx instanceof MissingCredentialsException ) {
            log.warn("missing sth");
            writer.println("HTTP Status 401 - " + " Missing required fields: " + authEx.getMessage());
        }
        if ( authEx instanceof InsufficientAuthenticationException ) {
            log.warn("insuf");
            writer.println("HTTP Status 401 - " + " You need to login in order to access this resource");
        }

  // Exception Advises
 @ResponseBody
 @ExceptionHandler(InsufficientAuthenticationException.class)
 @ResponseStatus(HttpStatus.FORBIDDEN)
 String InssuficientAuthenticationHandler(InsufficientAuthenticationException ex) {
     log.info("Insufficient Authentication");
     return "You need to be authenticated to access this resourced";
 }

 @ResponseBody
 @ExceptionHandler(BadCredentialsException.class)
 @ResponseStatus(HttpStatus.FORBIDDEN)
 ResponseEntity<Object> BadCredentialsHandler(BadCredentialsException ex) {
     return ResponseEntity
             .status(HttpStatus.NOT_FOUND)
             .body("pls work :')");
 }
 @ResponseBody
 @ExceptionHandler(MissingCredentialsException.class)
 @ResponseStatus(HttpStatus.FORBIDDEN)
 String MissingCredentialsHandler(MissingCredentialsException ex) {
     log.info("Insufficient Authentication");
     return "Missing required information: " + ex.getMessage();
 }

// Security Configuration
 SecurityConfiguration( DatabaseAuthenticationManager manager,
                           MyBasicAuthenticationEntryPoint customAuthenticationEntryPoint,
                           EmployeeRepository repository) {
        this.manager = manager;
        this.customAuthenticationEntryPoint = customAuthenticationEntryPoint;
        this.repository = repository;
    }

    @Bean
    public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {

        http
                .authorizeHttpRequests((authorizeHttpRequests) ->
                        authorizeHttpRequests
                                .requestMatchers("/login").permitAll()
                                .anyRequest().authenticated()
                )
                .csrf().disable();

        http.addFilter(new BasicAuthenticationFilter(manager));
        http.addFilter(new ExceptionTranslationFilter(customAuthenticationEntryPoint));

        return http.build();
    }