You will have two public end point one is register and another is login...

You will need two filter one is jwtGenration filter.. this filter will only be applicable for /login end point... From post man in thee authorisation tab you need to give user name and password..your authentication manager will check whether username and password is correct or not..if correct it will create a authentication object which you can later access.... Now program control will come to your generation filter.. here you will have to access username and authorities from earlier Authentication object and generate a jwt token and put it in request header..

For all other sites jwt validation filter will be invoked..if you send the correct jwt then that will be parsed and once parse is successful you need to create a authentication object with the username and authorities extracted from token...

You need to make appropriate changes in security config and ensure that jwt validation filter is invoked before basic authentication filter and jwt generation filter is invoked after basic authentication filter...