Spring Security creates an Authentication bean that has information about the current user. If you want to get rid of the dependency on Spring Security, just use the Principal interface that Authentication extends.