SecurityContext Lost in @Async Thread

SecurityContextHolder uses ThreadLocal by default — bound to HTTP thread. @Async runs on task executor thread without copied context. Fix:...