I don't have a direct reference to the spec that absolutely guarantees this, but @PostConstruct
should be thread safe.
The CDI runtime is fully in charge of creating beans and will only create one instance for a given scope. @PostConstruct
runs before the bean is accessible in such a scope or via injection.