Spring Security AWS - Token Exchange with Auth0 not happening (thought it might be IPV6 issue...)

I have a basic configurationBrowser --> Spring BFF --> Spring Rest APIThe Spring BFF and Spring Rest API are both ...

Spring Security relying-party-registration doesn't resolve placeholders in xml

Describe the bugWhen declaring a relying-party-registration element in a Spring Security XML namespace configuration, at...

Spring Security Inconsistent constructor declaration on bean with name '_reactiveMethodSecurityConfiguration'

Describe the bugI get this warn in my spring boot reactive app:f.a.AutowiredAnnotationBeanPostProcessor : Inconsistent c...

Spring Security Add @AuthorizeRequestMapping annotation

Combined with gh-16249 we could add an annotation (e.g. @AuthorizeRequestMapping) that allows adding authorization rules...

Spring Security Allow access to the registered AuthorizationManager

Expected BehaviorI would like to get access to the configured AuthorizationManager to be able to use it for custom authe...

Spring Security JDBC WebAuthn Repositories

Spring Security currently only has in memory implementations of webauthn repositories. We should add the option to use J...

Spring Security Pass Http Request to OAuth2AuthorizationRequestResolver#authorizationRequestCustomizer

Expected BehaviorIt would be nice if we could use ServerWebExchange when customizing the Authorization Request using Def...

Spring Security State mismatch due to URL encoding

Describe the bugState parameter is generated using Base64 url encoder [1]. It ends up containing an "equals" sign at the...

Spring Security how to config httpclient timeout in spring gateway?

When the server ip of the auth server is incorrectly written, or the server is unavailable, the timeout time configured ...

Spring Security Infinite loop when wrong username and password are send as application/x-www-form-urlencoded

I'm trying to implement OAuth2 authentication using spring-cloud-starter-oauth2. Github codeI can make successful authen...

Spring Security Jwt Principal customization

Expected BehaviorI want to use method authorization annotations and @AuthenticationPrincipal clean way with custom busin...

Spring Security Support Meta-Annotation Parameters on Parameter Annotations

In 6.4, support for meta-annotation parameters was added to @AuthenticationPrincipal and @CurrentSecurityContext.It woul...

Spring Security Consider alerting applications when both FilterSecurityInterceptor and AuthorizationFilter are in the same filter chain

This is almost definitely a misconfiguration. It could be detected in DefaultFilterChainValidator. Since Spring Security...

Spring Security Fail when several filter chains have the same securityMatcher

Related https://github.com/spring-projects/spring-security/issues/15220@Bean @Order(0)SecurityFilterChain app(HttpSecuri...

Spring Security hasAuthority and custom Mono<Boolean> method in @PreAuthorize leads to ConverterNotFoundException error

Describe the bugAfter upgrading to Spring Boot 3.3.0 and Spring Security 6.3.0 I've tried to migrate my single Mono&lt;B...

Spring Security relying-party-registration doesn't allow placeholders in xml

Using Spring Security 6.0.8I use XML based configuration for most security setup as I have customisations that need to b...

Spring Security Support varying maxSessions by user in Servlet

Expected BehaviorFor Reactive Applications, the maximumSessions value can be configured using the SessionLimit abstracti...

Spring Security Spring Security's Filters and WebFilters Automatically Registered by Spring Boot

Spring Security reuses Filter and WebFilter APIs for security-based controller based logic within a Spring Security appl...

Spring Security Deprecate PortResolver

PortResolver was created to work around an old IE bug where ServerRequest.getServerPort() could return the incorrect por...

Spring Security Add copyright modifier task

It would be nice if the build modified copyright years for those files modified. This is helpful first since it is easy ...
上一页 下一页
.