玖涯软件开发|java/go/python

Spring Security OAuth2ResourceServerConfigurer#authenticationManagerResolver should override #jwt

Given the following configuration:@Beanpublic SecurityFilterChain authorizationServerSecurityFilterChain(HttpSecurity ht...

Spring Security Kotlin MVC Integration Docs should use servlet path parameter

The MVC Integration documentation for Kotlin suggests using MvcRequestMatcher.Builder directly. However, this is already...

Spring Security Redirect using a relative URL

Spring Security originally redirected on authentication success with an absolute URL, conforming to https://www.rfc-edit...

Spring Security Troubleshoot missing GChat notifications

Comment From: sjohnrhttps://github.com/spring-io/spring-security-release-tools/commit/fdfb70a3d02d7d69edb7bfa6baf489cafc...

Spring Security Bean Conflict Between webSocketAuthorizationManagerPostProcessor and objectPostProcessor in Spring Security Configuration

Describe the bugThe application fails to start due to a conflict between two beans required by the declare Bean Security...

Spring Security [Enhancement request] ability to configure custom TTL per token

ContextHow has this issue affected you?I would end up DDOS the token provider serviceWhat are you trying to accomplish?I...

Spring Security Display default login page with only one-time token login

Expected BehaviorOne time token login has a dedicated field and button on the default login page (DefaultLoginPageGenera...

Spring Security Add Allow List to Jackson Support

SummaryThere are some performance optimizations we can provide for jackson integrationComment From: TanqiZhouorg.springf...

Spring Security Add some support for OIDC Discovery endpoint Configuration URL

Expected BehaviorAdd some support for OIDC Discovery endpoint Configuration URLlike This Document from IBM WASFinally it...

Spring Security [Enhancement request] Integration between Spring oauth2 client and Spring Framework release 6 HttpInterface .attributes(clientRegistrationId("id")) for @HttpExchange @GetExchange

ContextHow has this issue affected you?I am getting 401 without this enhancement requestWhat are you trying to accomplis...

Spring Security Support fullyAuthenticated in Kotlin authorizeHttpRequests

Describe the bugUpgrading from Spring Boot 3.3.5 to 3.4.0 includes an upgrade to Spring Security 6.4, which deprecates t...

Spring Security [Enahncement request] [spring-boot-starter-oauth2-client] ability to provide custom RestClient instead of using RestTemplate for provider get token observablity

ContextHow has this issue affected you?Without this enhancement request, we are blind in production for issues getting t...

Spring Security Access Denied 403 when adding a custom authentication filter in place of UsernamePasswordAuthenticationFilter.

Describe the bugI expanded the functionality of the UsernamePasswordAuthenticationFilter by incorporating a filter that ...

Spring Security Error while extracting response for type [org.springframework.security.oauth2.core.endpoint.OAuth2AccessTokenResponse]

Describe the bugWhen trying to use Spring Security to enable Google authentication, without Spring Boot, as described in...

Spring Security Fix Kotlin DSL webAuthn { }

WebAuthnDsl is implemented incorrectly, we need to change the implementation of the get() method according to the usual ...

Spring Security ClientRegistrations RestTemplate not configurable

Describe the bugWhen ClientRegistrations is used to obtain meta data from issuer that has an invalid HTTPS certificate (...

Spring Security Support Configuring OAuth2 Login with OAuth2AuthorizationRequestResolver by publishing a Bean

gh-15236 added support for configuringOAuth2AuthorizationRequestResolver for OAuth2 Client's by publishing a Bean. This ...

Spring Security Add proper equals (and hashCode) methods to OAuth2AuthorizationRequest

Expected BehaviorThe class org.springframework.security.oauth2.core.endpoint.OAuth2AuthorizationRequest should have prop...

Spring Security Add support for additional dynamic OIDC Token Exchange Request parameters

Expected BehaviorIn a project I am currently working on, we must send additional request parameters in the OIDC Token Ex...

Spring Security Consider Enabling PKCE for Authorization Code by Default

PKCE is recommended to prevent CSRF and authorization code injection attacks. We should consider enabling enabling PKCE ...

上一页下一页

1
…
510
511
512
513
514
…
2246

.