boolean someoneCouldAuthorize = false;
for (int i = 0; i < authorities.length; i++) {
Authority authority = authorities[i];
if (authority.canAuthorize(request)) {
someoneCouldAuthorize = true;
request = authority.authorize(request);
// authorization failed, return null