@Component
public class PasswordResetHandlerInterceptor extends HandlerInterceptorAdapter {

	@Autowired
	private LoggedInUserLoadService loggedInUserLoadService;

@Override
public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
	Authentication authentication = (Authentication) request.getUserPrincipal();
	boolean isPasswordExpired =
	Optional.ofNullable(authentication)
	.map(a -> a.getPrincipal())
	.filter(p -> p instanceof UserDetails)
	.map(p -> (LoggedInUser) p)
	.map(u -> loggedInUserService.loadUserByUsername(u.getUsername())) // DBから取得しないといつまでもパスワード期限切れ
	.map(u -> u.isPasswordExpired()) // isCredentialsNotExpired()は無条件にtrue
	.orElse(false);

	if (isPasswordExpired) // リダイレクト処理

	return ! isPasswordExpired;
}

}

@Configuration
public class WebMvcConfig extends WebMvcConfigurerAdapter {

	@Autowired
	PasswordResetHandlerInterceptor passwordResetInterceptor;
	
	@Override
	public void addInterceptors(InterceptorRegistry registry) {
		registry.addInterceptor(passwordResetInterceptor);
	}

}