There is only documentation incidental to anonymous access about @CurrentSecurityContext. There should be a dedicated section like the one for @AuthenticatedPrincipal