private Authentication getInProgressAuthentication(final HttpServletRequest request) {
        val flowExecutors = applicationContext.getBeansOfType(FlowExecutor.class)
            .values()
            .stream()
            .filter(CasFlowExecutor.class::isInstance)
            .map(CasFlowExecutor.class::cast)
            .collect(Collectors.toSet());
        for (val casFlowExecutor : flowExecutors) {
            val flowExecutionRepository = casFlowExecutor.getFlowExecutionRepository();
            val execution = casFlowExecutor.getFlowUrlHandler().getFlowExecutionKey(request);
            if (StringUtils.isNotBlank(execution)) {
                try {
                    val flowExecutionKey = flowExecutionRepository.parseFlowExecutionKey(execution);
                    val flowExecution = flowExecutionRepository.getFlowExecution(flowExecutionKey);
                    return WebUtils.getAuthentication(flowExecution.getConversationScope());
                } catch (final Exception e) {
                    LOGGER.debug("Unable to determine authentication attempt from the webflow context: [{}]", e.getMessage());
                    LOGGER.trace(e.getMessage(), e);
                }
            }
        }
        return null;
    }
This is {@link CasWebflowSecurityContextRepository}.

@author Misagh Moayyed
@since 7.1.0
support/cas-server-support-webconfig/src/main/java/org/apereo/cas/web/security/CasWebflowSecurityContextRepository.java