Autowired менеджера аутентификации в Spring Security Filter

public class TokenAuthenticationFilter extends AbstractAuthenticationProcessingFilter {
 
public TokenAuthenticationFilter() {
    super("/**");
    this.setAuthenticationManager(new TokenAuthenticationManager()); // <-------- видимо, проблема тут
    setAuthenticationSuccessHandler((request, response, authentication) ->
    {
        SecurityContextHolder.getContext().setAuthentication(authentication);
        request.getRequestDispatcher(request.getServletPath() + request.getPathInfo()).forward(request, response);
    });
    setAuthenticationFailureHandler((request, response, authenticationException) -> {
        response.getOutputStream().print(authenticationException.getMessage());
    });
}
 
@Override
public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response)
        throws AuthenticationException, IOException, ServletException {
    String token = request.getHeader("token");
    if (token == null)
        token = request.getParameter("token");
    if (token == null) {
        TokenAuthentication authentication = new TokenAuthentication(null);
        authentication.setAuthenticated(false);
        return authentication;
    }
    TokenAuthentication tokenAuthentication = new TokenAuthentication(token);
    Authentication authentication = getAuthenticationManager().authenticate(tokenAuthentication);
    return authentication;
}
 
@Override
public void doFilter(ServletRequest req, ServletResponse res,
                     FilterChain chain) throws IOException, ServletException {
    super.doFilter(req, res, chain);
}

@Service
public class TokenAuthenticationManager implements AuthenticationManager {
 
@Autowired
private UserService usersService;
 
@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    try {
        if (authentication instanceof TokenAuthentication) {
            TokenAuthentication readyTokenAuthentication = processAuthentication((TokenAuthentication) authentication);
            return readyTokenAuthentication;
        } else {
            authentication.setAuthenticated(false);
            return authentication;
        }
    } catch (Exception ex) {
        if(ex instanceof AuthenticationServiceException)
            throw ex;
    }
    return null;
}
 
private TokenAuthentication processAuthentication(TokenAuthentication authentication) throws AuthenticationException {
    String token = authentication.getToken();
    String key = Base64.getEncoder().encodeToString("here gonna be a secret key".getBytes());
    DefaultClaims claims;
    // ...
    // tokenParsingThings
    // ...
    Date expiredDate = new Date(claims.get("token_expiration_date", Long.class));
    if (expiredDate.after(new Date()))
        return buildFullTokenAuthentication(authentication, claims);
    else
        throw new AuthenticationServiceException("Token expired date error");
}
 
@Transactional
public TokenAuthentication buildFullTokenAuthentication(TokenAuthentication authentication, DefaultClaims claims) {
    User user = usersService.loadUserByUsername(claims.get("USERNAME", String.class)); // <--- NPE, потому что сервис не заинжектился
    if (user.isEnabled()) {
        Role role = user.getRole();
        List<String> roles = new ArrayList<>();
        roles.add(role.getRole());
        Collection<GrantedAuthority> authorities = new ArrayList<>();
        authorities.add(new SimpleGrantedAuthority(role.getRole()));
        TokenAuthentication fullTokenAuthentication =
                new TokenAuthentication(authentication.getToken(), authorities, true, user);
        return fullTokenAuthentication;
    } else {
        throw new AuthenticationServiceException("User disabled");
    }
}

@RestController
@CrossOrigin
@RequestMapping("/subjectSections")
public class SubjectSectionsApiController {
 
... 
 
    @CrossOrigin
    @RequestMapping(value = "/", method = RequestMethod.GET, headers = "Accept=application/json")
    public @ResponseBody List<SubjectSection> listSubjectSections() {
        return subjectSectionService.getSubjectSections();
    }

@Override
    public void doFilter(ServletRequest req, ServletResponse res,
                         FilterChain chain) throws IOException, ServletException {
        if (((HttpServletRequest)req).getHeader("Authorization") == null || ((HttpServletRequest)req).getHeader("Authorization").equals(""))
            chain.doFilter(req, res);
        else super.doFilter(req, res, chain);
    }

@Override
    protected void configure(HttpSecurity http) throws Exception {
 
        http
                .csrf().disable().headers().frameOptions().sameOrigin()
                .and()
                .addFilterAfter(restTokenAuthenticationFilter(), UsernamePasswordAuthenticationFilter.class)
                .authorizeRequests()
                .antMatchers(HttpMethod.GET, "/").permitAll()
                .and().sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS);
 
    }
 
    @Bean(name = "restTokenAuthenticationFilter")
    public TokenAuthenticationFilter restTokenAuthenticationFilter() {
        TokenAuthenticationFilter restTokenAuthenticationFilter = new TokenAuthenticationFilter();
        restTokenAuthenticationFilter.setAuthenticationManager(tokenAuthenticationManager);
        return restTokenAuthenticationFilter;
    }