fixed it by setting "SPRING_SECURITY_CONTEXT" to the auth in the session, probably not the cleanest solution but it works.

        SecurityContext securityContext = SecurityContextHolder.getContext();
        securityContext.setAuthentication(authResult);
        HttpSession session = request.getSession(true);
        session.setAttribute("SPRING_SECURITY_CONTEXT", securityContext);