protected AbstractPolicyEnforcer(PolicyEnforcer policyEnforcer) {
    this.policyEnforcer = policyEnforcer;
}

public AuthorizationContext authorize(OIDCHttpFacade httpFacade) {
    EnforcementMode enforcementMode = this.getEnforcerConfig().getEnforcementMode();
   **// the source code here is always null and the rpt here i think should not be null**
    KeycloakSecurityContext securityContext = httpFacade.getSecurityContext();
    if (EnforcementMode.DISABLED.equals(enforcementMode)) {
        if (securityContext == null) {
            httpFacade.getResponse().sendError(401, "Invalid bearer");
        }

        return this.createEmptyAuthorizationContext(true);
    }