my web.xml config is
springSecurityFilterChain org.springframework.
I had the same issue. In my case the solution was to set AbstractAuthenticationToken.setAuthenticated to true after the authentication passed.