public void invoke(Request request, Response response) throws IOException, ServletException {
Realm realm = this.getContainer().getRealm();
// call JASPI only for the unprotected resources - at this point, access to protected resources has already been
// checked by the web container authenticator.
if (realm.findSecurityConstraints(request, (Context) this.getContainer()) == null) {
log.tracef("Invoking optional JASPI authenticator for request context %s", request.getServletPath());
GenericMessageInfo messageInfo = new GenericMessageInfo();
messageInfo.setRequestMessage(request);