Spring Security Redirect to 8443 if using SSL on the 8080 port

SummaryI came here from this issue: https://github.com/spring-projects/spring-boot/issues/6140I have a problem that is d...

Spring Security Customize RestOperations / WebClient for OAuth 2.0

We've been working on an enhancement (gh-8732) that allows an application to provide a custom RestOperations or WebClien...

Spring Security Support WebAuthn

Summaryhttps://www.w3.org/TR/webauthnWork on this was started in gh-6842 but stalled. The work is still in https://githu...

Spring Security Document setting up client_credentials with access tokens scoped to the application

We should add a clear example to the reference for setting up an application with the client_credentials grant type. Oft...

Spring Security spring-security-cas use in webflux

Do you have plans to support spring-security-cas use in webflux?I have use webflux in netty containerComment From: rwin...

Spring Security Add Support for Passkeys

Passkeys have emerged as the industry standard consumer facing solution to get rid of passwords see passkeys.dev with fi...

Spring Security OAuth2LoginAuthenticationProvider should respect jwk-set-uri

SummaryWhen registering a OAuth2 Provider, a JWK Set URI can be set, according to https://docs.spring.io/spring-security...

Spring Security Allow configurable RestOperations for NimbusJwtDecoderJwkSupport

NimbusJwtDecoderJwkSupport uses Nimbus's HTTP Client internally to retrieve the JwkSet resource.We should re-factor to u...

Spring Security Spring Boot / Secuurity with AWS Elasticache - getting strange Session ID behaviour

On my local machine, everything works:2024-10-20T01:05:13.135+01:00 INFO 3050 --- [BFFApplication] [ redisson-4-6] c....

Spring Security Parameters customizer called before all parameters are set

The parametersCustomizer in DefaultOAuth2TokenRequestParametersConverter cannot customize parameters that are added afte...

Spring Security CSRF Issue Latest spring Version:An expected CSRF token cannot be found

CSRF Issue Latest spring Version:An expected CSRF token cannot be foundSummaryWIth Spring security version 5 with below ...

Spring Security Allow comma-delimited scopes in OAuth2 access token response

Expected BehaviorShould be possible to configure scope delimiter if server sends scopes as comma-delimited string (e.g. ...

Spring Security s101 configuration is slow

Running a build I'm seeing that the s101 configuration takes over 30 seconds. Configuration should defer all work until ...

Spring Security Oauth2 jwt not work if no Authorization attribute in http header or Authorization not start with 'Bearer '

Hello,I use Oauth2 jwt connected to the keycloak server to verify the user's jwt token, but I find if there's no Authori...

Spring Security @PreAuthorize cannot override SecurityFilterChain

Describe the bugThe documentation mentions here that:It’s important to remember that when you use annotation-based Metho...

Spring Security SEC-2028: Support remember me and concurrency control

Rob Winch (Migrated from SEC-2028) said:Currently the concurrency control does not work with remember me. It would be go...

Spring Security Change .size() == 0 to .isEmpty() for Collections

Expected Behavior- All checks for empty Collections (Lists, Maps, etc.) should use the .isEmpty() method instead of .siz...

Spring Security AuthorizationManager should support returning an AuthorizationResult

It would be nice for AuthoriationManager to code to the AuthorizationResult interface like so:default AuthorizationResul...

Spring Security Inconsistent ReactiveOAuth2UserService in OAuth2LoginSpec

Describe the bugThe way to configure a ReactiveOAuth2UserService<OAuth2UserRequest, OAuth2User> in OAuth2LoginSpe...

Spring Security Add RelayState-based Authentication Request Respository

Describe the bugWe have a business use case where an application opens multiple tabs of our application, and they share ...
上一页 下一页
.