I am using java with spring boot 3.0.Here is my SecurityFilterChain:@Bean public SecurityFilterChain filterChain(Http...

The code example for creating a OAuth2ClientHttpRequestInterceptor is incorrect in Access Protected Resources for the Cu...

Describe the bugPrior to Spring Security 6, the CsrfTokenRepository used the response.addCookie in the saveToken method ...

Describe the bugWhen disabling session management (or using SessionCreationPolicy.STATELESS I believe) the SecurityConte...

While migrating to the new Spring Boot 3.4 version I am facing the following error in a project with RSocket, Spring Sec...

Current BehaviorI am developing an application consisting of a Single Page Application (JavaScript) and a backend writte...

small regression in that the following Resources don't seem to exist when compiling to a graalvm native image public sta...

I am integrating our exsisting application with spring security. Our exsisting application triggers saml request and val...

Currently the logout filters of the saml expects the singleLogoutServiceLocation to be in the form logout/saml2/slo or l...

Hello,I use Spring Boot 2.1.0.M4I have Authorization Server on port 9090 with next configuration :AuthorizationServerCon...

The documentation for Spring Security seems to have a discrepancy regarding how the UsernamePasswordAuthenticationToken ...

Forward port of https://github.com/spring-projects/spring-security/pull/16050Comment From: jzheauxClose in 315aafd464958...

Alex Pogrebnyak (Migrated from SEC-2811) said:I checked the bug exists in the latest revision on GitHub.These classes:- ...

SAML login fails in Chromium based browser even after adding hash in the CSPTo ReproduceSetup a system with SAML along w...

By removing OpenSAML3 support in Spring Security 6 we need to make sure that the OpenSAML dependency versions are update...

Describe the bugI am running spring-boot 2.3.1 with spring-boot-starter-oauth2-client, after adding a context-path, ever...

Placing @AuthorizeReturnObject on a method that returns ResponseEntity is limiting since the user doesn't have access to...

Expected BehaviorIn order to be able to work with some restrictive SSO implementations sometimes additional parameters a...

Describe the bugI have two endpoints with path variables. One endpoint is specified with two path variables and the othe...

Describe the bugWhen trying to log in, if the log in successful, then it will redirect to the wrong URL: http:localhost:...