Spring Security OAuth2AccessTokenResponse should allow to customize behavior in absence of "expires_in" parameter

  • 2025-01-18 09:00:35
  • 8083
Expected BehaviorFrom the spec quoted by OAuth2AccessTokenResponse (https://tools.ietf.org/html/rfc6749#section-5.1) the...

Spring Security WebClient support should get new access token when expired and password

  • 2025-01-18 09:00:32
  • 20967
Describe the bugI know this has been addressed and fixed before for client_credentials grant type: https://github.com/sp...

Spring Security Some enhancement suggestions for new Authorization architecture classes for customizing the authorization logic

  • 2025-01-18 09:00:29
  • 8820
Hello,I was trying to extend the current pre authorization behavior to suit our needs. Basically I wanted to look at the...

Spring Security Unable to configure client_assertion_type with private_key_jwt for client credential grant type

  • 2025-01-18 08:59:58
  • 8500
Describe the bugI am using spring-boot-starter-parent 2.6.4. I need to integrate with Okta api with client credentials p...

Spring Security Annotated Support for Securing Return Values

  • 2025-01-18 08:59:55
  • 452
It would be nice if we provided annotated support for securing returned values. For example:@Serviceclass FooService { ...

Spring Security Spring Security 6.0.10 release is missing?

  • 2025-01-18 08:59:53
  • 811
Describe the bugFollowing the announcements, expected to see Spring Security 6.0.10 release but sadly cannot find it amo...

Spring Security Session Creation Policy with Webflux Security

  • 2025-01-18 08:59:49
  • 10571
I am developing a reactive Spring Boot application with Spring Cloud Gateway and Spring Security using only Webflux and ...

Spring Security Please Make org.springframework.security.ldap.authentication.ad.ActiveDirectoryLdapAuthenticationProvider as non final class or change the securityPrincipal or bindPrincipal to make it work with dynamic parsed userId data

  • 2025-01-18 08:59:46
  • 3611
Trying to do simple AD or ldap integration with the below code but it is not working,@Autowired protected void config...

Spring Security SAML2: Support federation with multiple IdPs

  • 2025-01-18 08:59:40
  • 15996
A key feature of spring-security-saml2-core was the ability to easily configure multiple metadata providers to configure...

Spring Security Document configuration to support JWT Header TYP as "at+jwt"

  • 2025-01-18 08:59:37
  • 6207
Expected BehaviorCurrently, if the JWT is having typ as "at+jwt", the token is rejected with message "Failed to authenti...

Spring Security Session Management filter does not seem to honor the require explicit save option -> securityContext .requireExplicitSave(true)

  • 2025-01-18 08:59:33
  • 4089
Describe the bugSessionManagementFilter does not seem to honor the require explicit save option - securityContext .req...

Spring Security Programmatic Proxy Support for Method Security

  • 2025-01-18 08:59:30
  • 246
It would be nice if we could support programmatic support for proxying objects with method security. For example:class F...

Spring Security Support delegating BearerTokenResolver

  • 2025-01-18 08:59:28
  • 3413
Need to add support for retrieving tokens from different headers in one component. This is a common case when a project ...

Spring Security Support A Well-Known URL for Changing Passwords

  • 2025-01-18 08:59:25
  • 680
Expected BehaviorSpring Security should support https://wicg.github.io/change-password-url/index.htmlComment From: evgen...

Spring Security UsernamePasswordAuthenticationFilter supports configuring AuthenticationManagerResolver

  • 2025-01-18 08:59:22
  • 846
Expected BehaviorUsernamePasswordAuthenticationFilter supports configuring AuthenticationManagerResolver, just like the ...

Spring Security PostAuthorize Method Interceptors Should Use Order from AuthorizationInterceptorsOrder

  • 2025-01-18 08:59:17
  • 488
AuthorizationManagerAfterMethodInterceptor creates interceptors using the PostAuthorizeAuthorizationManager. However, th...

Spring Security how to force saml2login to direct to https://{baseUrl}/saml2/authenticate/{registrationId}

  • 2025-01-18 08:59:15
  • 2583
Describe the bugAm working on migrating a project from saml extension to saml2loginHere is my code snipet.saml2Login(sam...

Spring Security Problem uploading multipart file after migrating to latest Spring Security.

  • 2025-01-18 08:59:12
  • 2131
Describe the bugAfter upgrading Spring Boot from 2.7.11 (Spring Security 5.7.8) to 3.1.2 (Spring Security 6.1.2) uploadi...

Spring Security IllegalStateException when session is already invalidated

  • 2025-01-18 08:59:10
  • 2236
In AbstractPreAuthenticatedProcessingFilter.java in the following block of codeif (AbstractPreAuthenticatedProcessingFil...

Spring Security When using Spring Boot 3.x and Spring Security 6.x, I need to implement multi-party login. At this time, I implemented multiple UserDetailsService, which causes the JVM stack overflow. Below is a picture. Seeking help.

  • 2025-01-18 08:59:07
  • 685
When using Spring Boot 3.x and Spring Security 6.x, I need to implement multi-party login. At this time, I implemented m...
上一页 下一页
.