为什么我的弹簧启动无状态过滤器被调用两次？

I'm trying to implement stateless token-based authentication on a rest api I've developed using Spring Boot. The idea is that the client includes a JWT token with any request, and a filter extracts this from the request, and sets up the SecurityContext with a relevant Authentication object based on the contents of the token. The request is then routed as normal, and secured using @PreAuthorize on the mapped method. I'm trying to implement stateless token-based a