CustomAuthFilter.java

@Component
public class CustomAuthFilter extends OncePerRequestFilter {




    @Override
    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
        Object context=request.getSession().getAttribute("SPRING_SECURITY_CONTEXT");
        //context will be null if we dont pass x-auth-token in header and null should not be set in SecurityContextHolder
        if(context!=null){
                SecurityContextHolder.setContext((SecurityContext) context);
        }
        filterChain.doFilter(request, response);
    }
}