@PostMapping("/login") public ResponseEntity<?> authenticate(Request req) { SecurityContext ctx = Security.getContext(); if (!ctx.isAuthenticated()) throw new AuthException(); return ResponseEntity.ok(token); }