The entrypoint to Studio's Spring Security configuration is the AutoConfiguration class com.coremedia.springframework.component.security.EditingRestSecurityAutoConfiguration in module editing-rest-security, where a custom SecurityFilterChain bean is created.

To implement your custom authentication mechanism you have to first disable the built-in AutoConfiguration class, which can be done by setting the following Spring property:

spring.autoconfigure.exclude=
com.coremedia.springframework.component.security.EditingRestSecurityAutoConfiguration