Its weird, sometimes doFilter() is called once twice, once with ‘Authorization’ as null and then with actual ‘Authorization’ token. I am calling spring boot rest controller from a react fetch call.