玖涯软件开发|java/go/python

Spring Security AuthorizationAnnotationUtils.findUniqueAnnotation broken for inherithed repository methods

This issue is similar to https://github.com/spring-projects/spring-security/issues/13132But for repository methods going...

Spring Security Add logging in oauth2 modules

We need to add logging to the following modules:spring-security-oauth2-corespring-security-oauth2-clientspring-security-...

Spring Security Default /logout doesn't work when securityMatcher used in Spring Security 6

In Spring Security 6, (specifically Spring Boot 3.2, Spring MVC with Thymeleaf in my case) when securityMatcher is used,...

Spring Security Consider removing generics from AuthorizationRequestRepository

See issue gh-15354.Comment From: HyoJongParkDid the discussion end with the direction of the issue removing unnecessary ...

Spring Security Spring Security OAuth2 Client "user-name-attribute" property is being ignored

Describe the bugI am building a Spring Boot 3.3.1 app using spring-boot-starter-oauth2-client with GitHub.I have configu...

Spring Security DefaultRedirectStrategy includes firewalled semicolon jsessionid in url

according to #5267 I would think that a redirect with the jsessionid in the url shouldn't happen; as that says it's disa...

Spring Security HttpSecurity bean has no option to disable defaults

Starting from 5.7 the WebSecurityConfigurerAdapter has been deprecated in favour of using a custom bean for creating a S...

Spring Security OAuth2AuthorizationRequest is not extendable

Describe the bug OAuth2AuthorizationRequest is not extendableTo Reproducethe following is declaration of AuthorizationR...

Spring Security Dynamic register SecurityFilterChain

I want to configure a SecurityFilterChain for each tenant. How do I do thatComment From: marcusdacoregioHi, @leshalv, th...

Spring Security Spring Security 6 with Spring Boot 3.2.1 403 Forbidden after migration.

I am providing a simple reproduction project.After I migrate from Spring boot 2.8.7 to Spring Boot 3.2.1 with Spring Sec...

Spring Security Configure Build to Confirm UnboundId 7 Compatibility

Given that it will be until Spring Security 7 when the project updates to UnboundId 7, it would be good to introduce a b...

Spring Security Improve Single-Sign-On Redirect for SameSite=Lax and SameSite=Strict

Lax + POST mitigation as well as the following Spring Security tickets:https://github.com/spring-projects/spring-securit...

Spring Security Make OpenSamlMetadataRelyingPartyRegistrationConverter public

Expected BehaviorClass and its methods should be public.Current BehaviorClass and its methods are package-private.Contex...

Spring Security Post-process Release Changelog to Remove Duplicates

We could somehow post-process the release changelog file and remove duplicates. The duplicates are identified as, for ex...

Spring Security Publish Reference PDF and Single HTML

It would be great to have the PDFs and single HTML pages back again, so the docs can be read like a book.I personally fi...

Spring Security Support UnboundID LDAP SDK 7.0

https://github.com/pingidentity/ldapsdk/releases/tag/7.0.0The devil will be in the details, but looking at the release n...

Spring Security DefaultLdapAuthoritiesPopulator does not provide all authorities if pagination is enforced on LDAP Server

Describe the bugDefaultLdapAuthoritiesPopulator does not provide a way to fetch all authorities belonging to the user if...