Based one this comment from @rrrship, the documentation should be updated to correctly state that Spring Security fully supports coroutines at this point.