　spring bootでユーザーに紐付いたタスクを表示したい

前提

最近spring bootを学び始めた者です。
spring bootを用いてTodoアプリを作成しております。

ユーザーに紐付いたtodoをmysqlからデータを取り表示したいのですが、全てのユーザーのtodoが表示されてしまいます。
また、エラー文は出ていない状態です。

以下、DBです。

Usersテーブル

Column	Datatype	Default
id	INT
email	VARCHAR
password	VARCHAR
authority	VARCHAR	NULL

Todosテーブル

Column	Datatype	Default
id	INT
user_id	INT
title	VARCHAR
description	VARCHAR	NULL
due_date	DATE	NULL
priority	INT	NULL
is_completed	TINYINT	'0'
created_at	TIMESTAMP	CURRENT_TIMESTAMP
updated_at	TIMESTAMP	CURRENT_TIMESTAMP

実現したいこと

spring bootを用いて、mysqlに登録されているユーザーに紐付くtodoを表示したい。

該当のソースコード

build.gradle

plugins {
	id 'org.springframework.boot' version '2.7.5'
	id 'io.spring.dependency-management' version '1.0.15.RELEASE'
	id 'java'
}

group = 'com.portfoilo'
version = '0.0.1-SNAPSHOT'
sourceCompatibility = '17'

configurations {
	compileOnly {
		extendsFrom annotationProcessor
	}
}

repositories {
	mavenCentral()
}

dependencies {
	implementation 'org.jetbrains:annotations:20.1.0'
    implementation 'org.jetbrains:annotations:20.1.0'
    dependencies {
		implementation 'org.springframework.boot:spring-boot-starter-data-jdbc'
		implementation 'org.springframework.boot:spring-boot-starter-jdbc'
		implementation 'org.springframework.boot:spring-boot-starter-security'
		implementation 'org.springframework.boot:spring-boot-starter-thymeleaf'
		implementation 'org.springframework.boot:spring-boot-starter-web'
		implementation 'org.springframework.boot:spring-boot-starter-validation'
		implementation 'org.mybatis.spring.boot:mybatis-spring-boot-starter:2.2.2'
		implementation 'org.thymeleaf.extras:thymeleaf-extras-springsecurity5'
		implementation 'org.springframework.boot:spring-boot-starter-data-jpa'
		compileOnly 'org.projectlombok:lombok'
		developmentOnly 'org.springframework.boot:spring-boot-devtools'
		runtimeOnly 'com.mysql:mysql-connector-j'
		annotationProcessor 'org.projectlombok:lombok'
		testImplementation 'org.springframework.boot:spring-boot-starter-test'
		testImplementation 'org.springframework.security:spring-security-test'

	}
}

tasks.named('test') {
	useJUnitPlatform()
}

TodoController.java

package com.portfoilo.fullstackbackend.Controller;

import com.portfoilo.fullstackbackend.Model.Todo;
import com.portfoilo.fullstackbackend.Model.User;
import com.portfoilo.fullstackbackend.Repository.TodoRepository;
import com.portfoilo.fullstackbackend.Service.TodoService;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.validation.BindingResult;
import org.springframework.validation.annotation.Validated;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.PathVariable;
import org.springframework.web.bind.annotation.PostMapping;

import javax.validation.Valid;
import java.util.List;

@Controller
public class TodoController {

    @Autowired
    TodoRepository todoRepository;

    @Autowired
    TodoService todoService;

    @GetMapping("/todo/{id}")
    public String home(@PathVariable("id")Integer id, Model model) {
        List<Todo> list = todoRepository.find(id);
        model.addAttribute("list", list);
        return "home";
    }
}

UserController.java

package com.portfoilo.fullstackbackend.Controller;

import com.portfoilo.fullstackbackend.Service.UserRegistrationService;
import com.portfoilo.fullstackbackend.SignupForm;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.context.annotation.Lazy;
import org.springframework.stereotype.Controller;
import org.springframework.validation.BindingResult;
import org.springframework.validation.annotation.Validated;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.ModelAttribute;
import org.springframework.web.bind.annotation.PostMapping;

@Controller
public class AccountController {
    @Autowired
    @Lazy
    private UserRegistrationService userRegistrationService;

    @GetMapping("/")
    public String showTop() {
        return "index";
    }

    @GetMapping("/login")
    public String showLoginPage() {
        return "login";
    }

    @GetMapping("/signup")
    public String showUserRegistration(@ModelAttribute("signupForm") SignupForm signupForm) {
        return "signup";
    }

    @PostMapping("/signup")
    public String userRegistration(@Validated @ModelAttribute("signupForm") SignupForm signupForm, BindingResult result) {
        if(result.hasErrors()) {
            return "signup";
        }
        userRegistrationService.userRegistration(signupForm.getEmail(), signupForm.getPassword());
        return "redirect:/login";
    }
}

Todo.java

package com.portfoilo.fullstackbackend.Model;

import com.portfoilo.fullstackbackend.SignupForm;
import lombok.Data;

import javax.persistence.*;
import javax.validation.constraints.NotBlank;
import javax.validation.constraints.NotNull;
import java.util.Date;

@Entity
@Data
@Table(name = "todos")
public class Todo {
    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    private Integer id;

    @Column(name = "user_id")
    private Integer user_id;

    @NotNull
    @NotBlank
    @Column(name = "title")
    private String title;

    @NotNull
    @NotBlank
    @Column(name = "description")
    private String description;

    @Column(name = "due_date")
    private Date due_date;

    @Column(name = "priority")
    private Integer priority;

    @ManyToOne
    @JoinColumn(name = "user_id" ,insertable = false, updatable = false)
    private User user;
}

User.java

package com.portfoilo.fullstackbackend.Model;

import javax.persistence.*;
import java.util.List;

@Entity
@Table(name = "users")
public class User {
    @Id
    @Column(name = "id")
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    private Integer id;

    @Column(name = "email")
    private String email;
    @Column(name = "password")
    private String password;

    @Column(name = "authority")
    private String authority;

    @OneToMany(mappedBy = "user")
    private List<Todo> todos;

    public User(String email, String password, String authority) {
        this.email = email;
        this.password = password;
        this.authority = authority;
    }

    public User() {

    }

    public Integer getId() {
        return id;
    }

    public void setId(Integer id) {
        this.id = id;
    }

    public String getEmail() {
        return email;
    }

    public void setEmail(String email) {
        this.email = email;
    }

    public String getPassword() {
        return password;
    }

    public void setPassword(String password) {
        this.password = password;
    }

    public String getAuthority() {
        return authority;
    }

    public void setAuthority(String authority) {
        this.authority = authority;
    }

    public List<Todo> getTodos() {
        return todos;
    }

    public void setTodos(List<Todo> todos) {
        this.todos = todos;
    }
}

TodoRepository.java

package com.portfoilo.fullstackbackend.Repository;

import com.portfoilo.fullstackbackend.Model.Todo;
import com.portfoilo.fullstackbackend.Model.User;
import org.springframework.data.jpa.repository.JpaRepository;
import org.springframework.data.jpa.repository.Query;
import org.springframework.data.repository.query.Param;
import org.springframework.stereotype.Repository;

import java.util.List;

@Repository
public interface TodoRepository extends JpaRepository<Todo, Integer> {
    @Query(value = "SELECT * FROM asoviewtodo.todos INNER JOIN asoviewtodo.users ON asoviewtodo.todos.user_id = asoviewtodo.users.id",nativeQuery = true)
    List<Todo> find(@Param("id") Integer id);
}

Home.html

<html xmlns:th="http://www.thymeleaf.org" xmlns="http://www.w3.org/1999/html">
<head>
    <meta charset="UTF-8">
    <link th:href="@{/css/home.css}" rel="stylesheet"/>
    <title>Todo管理</title>
</head>
<body>
<h1>Todo管理</h1>
<h2>やること一覧</h2>
<div>
    <tr th:each="list:${list}">
        <td th:text="${list.title}">
    </tr>
</div>
<form th:action="@{/logout}" method="post">
    <button class="logout-button" type="submit" value="ログアウト">ログアウト</button>
</form>
</body>
</html>

試したこと

TodoRepository.javaにおいて、UserテーブルとTodoテーブル内部結合のためSQLを書いたが、紐付いたTodoではなく全てのTodoが表示されてしまいました。
SQLに間違いがあるのかと思い調べてみたのですが、それらしい回答も見つかっていない状態です。
お力を貸していただければ幸いです。よろしくお願いいたします。