{"action":"closed","issue":{"url":"https://api.github.com/repos/spring-projects/spring-security/issues/3780","repository_url":"https://api.github.com/repos/spring-projects/spring-security","labels_url":"https://api.github.com/repos/spring-projects/spring-security/issues/3780/labels{/name}","comments_url":"https://api.github.com/repos/spring-projects/spring-security/issues/3780/comments","events_url":"https://api.github.com/repos/spring-projects/spring-security/issues/3780/events","html_url":"https://github.com/spring-projects/spring-security/issues/3780","id":145140446,"number":3780,"title":"HttpServlet3RequestFactory creates a request wrapper that always has a non-null AsyncContext","user":{"login":"dsyer","id":124075,"avatar_url":"https://avatars.githubusercontent.com/u/124075?v=3","gravatar_id":"","url":"https://api.github.com/users/dsyer","html_url":"https://github.com/dsyer","followers_url":"https://api.github.com/users/dsyer/followers","following_url":"https://api.github.com/users/dsyer/following{/other_user}","gists_url":"https://api.github.com/users/dsyer/gists{/gist_id}","starred_url":"https://api.github.com/users/dsyer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dsyer/subscriptions","organizations_url":"https://api.github.com/users/dsyer/orgs","repos_url":"https://api.github.com/users/dsyer/repos","events_url":"https://api.github.com/users/dsyer/events{/privacy}","received_events_url":"https://api.github.com/users/dsyer/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-04-01T10:06:35Z","updated_at":"2016-04-01T14:53:50Z","closed_at":"2016-04-01T14:53:50Z","body":"I'm not sure what the spec says, but Tomcat (at least) makes an assumption that if the async context is not null then an async request is in process. Spring Security fools it into thinking this is the case and prevents the response from being rendered.\r\n\r\nThis line here is the culprit: https://github.com/spring-projects/spring-security/blob/master/web/src/main/java/org/springframework/security/web/servletapi/HttpServlet3RequestFactory.java#L180. It should check for null and return that before wrapping."}}