spring-projects / spring-security

Spring Security

http://spring.io/projects/spring-security

spring-projects/spring-security Issues

@EnableReactiveMethodSecurity does not support ResponseEntity<Publisher<T>> as return type
Updated 17 days ago3
Simplify chaining of OAuth2TokenValidator with JwtValidators defaults
Updated 17 days ago
Support customizing the redirect URL in OidcClientInitiatedServerLogoutSuccessHandler
Updated 17 days ago6
Documentation links for 5.x are broken
Updated 17 days ago
Transactional annotation breaks AOT for native image
Updated 17 days ago2
token verification process issues
Closed 18 days ago1
Reactive Spring Security is always creating the Session in redis even when NoOpServerSecurityContextRepository specified for securityContextRepository
Closed a month ago5
Add DelegatingServerLogoutSuccessHandler
Updated 18 days ago
Add BearerTokenAuthenticationConverter
Updated 20 days ago6
Invalid ClientAuthenticationMethod can be configured
Closed 21 days ago1
Bad return type for HeadersConfigurer#permissionsPolicy method with customizer
Closed 21 days ago1
Automatically update `docs-build` branch dependencies
Updated 21 days ago
Add RequestMatcherDelegatingAuthenticationSuccessHandler
Updated 22 days ago
5.8.x (x >= 10) docs are not deployed
Closed 22 days ago
Update reactive OAuth2 docs landing page with examples
Closed 23 days ago
Support for OpenID Connect Session Management session_state parameter
Updated 23 days ago
Client id inclusion for refresh token grant is not consistent between servlet and reactive stacks
Updated 23 days ago
SpaCsrfTokenRequestHandler(Kotlin) documented in csrf-integration-javascript-spa causes NullPointerException
Closed 23 days ago
SpaCsrfTokenRequestHandler(Kotlin) documented in csrf-integration-javascript-spa causes NullPointerException
Closed 23 days ago
CorsConfigurationSource seems makes no effect
Closed a month ago3
bug org.springframework.security.oauth2.server.resource.introspection.SpringOpaqueTokenIntrospector introspect method error
Updated 25 days ago
Sign SP Metadata
Updated 25 days ago
Support UnboundID LDAP SDK 7.0
Updated a month ago
CustomUsernamePasswordAuthenticationFilter is not working with custom Form login in SpringBoot version 3.X
Closed a month ago2
Address AuthorizationObservationConvention Package Tangle
Closed a month ago
Address AuthorizationObservationConvention Package Tangle
Closed a month ago
When the controller is implementing an interface "No static resource"
Closed a month ago4
Support for configure JwtGrantedAuthoritiesConverter
Closed a month ago3
InResponseTo Validation failing for multiple Authentication Request for same session.
Updated a month ago
Default url are authenticated when any security matcher is specified
Updated a month ago1
Considering making the RestTemplate configurable in ClientRegistrations
Closed a month ago1
Add more doc for XorCsrfTokenRequestAttributeHandler
Closed a month ago1
[Oauth2 resource server]: InvalidBearerTokenException with access token generated using Client_crendentials grant_type
Closed a month ago2
Spring Security 6.0.10 release is missing?
Closed a month ago1
WARN Bean 'grantedAuthorityDefaults' of type [org.springframework.security.config.core.GrantedAuthorityDefaults] is not eligible for getting processed by all BeanPostProcessors
Closed a month ago5
CasAuthenticationFilter.CAS_STATEFUL_IDENTIFIER missing
Updated a month ago
Check for `null` Authentication
Closed a month ago
Refactoring Test Code to Reduce Duplication of Mock Object Creation
Updated a month ago
Fix Auto Merge Dependabot Commits not being triggered
Closed a month ago
DefaultRelyingPartyRegistrationResolver should provide the end user to resolve URL with custom URL templates
Updated a month ago
DefaultLdapAuthoritiesPopulator does not provide all authorities if pagination is enforced on LDAP Server
Updated a month ago
Re-enable `.github/workflows/update-dependabot.yml`
Updated a month ago
Dependabot should consider minor versions for `main` branch until RC
Closed a month ago
Add CIBA support
Updated a month ago
PostAuthorize Method Interceptors Should Use Order from `AuthorizationInterceptorsOrder`
Closed a month ago
PostAuthorize Method Interceptors Should Use Order from `AuthorizationInterceptorsOrder`
Closed a month ago
PostAuthorize Method Interceptors Should Use Order from `AuthorizationInterceptorsOrder`
Closed a month ago
PostAuthorize Method Interceptors Should Use Order from `AuthorizationInterceptorsOrder`
Closed a month ago
Support Externalized Method Security Configuration
Updated a month ago
How to resolve CVE-2023-2976 vulnerability in Maven dependency com.google.guava:guava:31.1-jre with Spring Security 6.2.1?
Closed a month ago1