Intercepting Authorization Bearer tokens in HTTP requests.
Validates Bearer token signature and populates SecurityContext.