Spring Security add new metadata in InMemoryRelyingPartyRegistrationRepository

  • 2025-01-18 08:58:00
  • 1480
Describe the bugWhen attempting to add a new collection in my InMemoryRelyingPartyRegistrationRepository, it does not wo...

Spring Security SecurityContextHolderAwareRequestWrapper.getAuthentication no longer returns a non-authenticated Authentication

  • 2025-01-18 08:57:58
  • 1302
Describe the bugNot sure this is an intended change or not in https://github.com/spring-projects/spring-security/commit/...

Spring Security Publishing PrePostTemplateDefaults creates circular dependency

  • 2025-01-18 08:57:54
  • 1088
When publishing PrePostTemplateDefaults like so:@Bean PrePostTemplateDefaults templateDefaults() { return new PrePost...

Spring Security Customizable Exception for Invalid Client Registration ID in OAuth2AuthorizationRequestRedirectFilter

  • 2025-01-18 08:57:52
  • 3504
Thank you for your continuous efforts in maintaining and improving spring security.I would like to discuss a potential e...

Spring Security Support retrieving OAuth2AuthorizedClient from cache.

  • 2025-01-18 08:57:49
  • 2112
Need to add an OAuth2AuthorizedClientService implementation that gets OAuth2AuthorizedClient from the cache. In some cas...

Spring Security AttemptAuthentication is not being intercepted after upgrade to 6

  • 2025-01-18 08:57:46
  • 7176
Describe the bugI had a ticket to upgrade one of the springboot application to spring boot 3 version after upgrade every...

Spring Security Missing JSON session support for "impersonate" (SwitchUserGrantedAuthority)

  • 2025-01-18 08:57:43
  • 956
Expected Behavior"Impersonate" (SwitchUserGrantedAuthority) is supported by JSON session serialization (SecurityJackson2...

Spring Security SignatureAlgorithm does not support EdDSA algorithm

  • 2025-01-18 08:57:41
  • 2626
SignatureAlgorithm does not support EdDSA algorithm, I can not use JwkSetUriJwtDecoderBuilder to create a NimbusJwtDecod...

Spring Security SEC-1877: Allow injection of rolePrefix to LdapUserDetailsManager

  • 2025-01-18 08:57:15
  • 1952
Yale Madden (Migrated from SEC-1877) said:The rolePrefix member of LdapUserDetailsManager defaults to "ROLE_." This forc...

Spring Security security:client-registrations doesn't take propertyconfigurer properties

  • 2025-01-18 08:57:12
  • 2264
Using Spring Security 5.3.1.RELEASEI use XML based configuration for most security setup as I have customizations that n...

Spring Security In-memory (default) implementation of SessionRegistry is not compatible with DefaultOidcUser and DefaultOAuth2User as the principal

  • 2025-01-18 08:57:09
  • 1802
I have a federated spring authorisation server which uses social login. To restrict the number user login sessions, enab...

Spring Security http PATCH w/ spring-data-rest @PreAuthorize save() method, custom PermissionEvaluator receives null object

  • 2025-01-18 08:57:06
  • 2934
SummarySample: https://github.com/bitsofinfo/spring-boot-data-pre-authorize-issuespring-security 4.1.3, spring-boot 4.1,...

Spring Security Return a logout response with an error status when validation of the logout request fails

  • 2025-01-18 08:57:03
  • 1048
Expected BehaviorSaml2LogoutRequestFilter should return a logout response back to the user agent when validation errors ...

Spring Security Method Security fails to propagate method parameters to SpEL expressions

  • 2025-01-18 08:57:00
  • 1592
Describe the bugWhen adding an @PreAuthorize annotation to my repository interface that checks certain entity fields the...

Spring Security SEC-1658: JA-SIG CAS Single Sign Out feature conflict with session-fixation protection

  • 2025-01-18 08:56:57
  • 6430
DUBOIS Fabrice (Migrated from SEC-1658) said:I run into problems with CAS Single Sign Out feature working with session-f...

Spring Security ObservationTextHandler class is not defined in a reactive context

  • 2025-01-18 08:56:54
  • 805
Describe the bugWhile integrating Reactive spring security with observability, we got a code to create the bean of Obser...

Spring Security Create composite ReactiveAuthenticationManager

  • 2025-01-18 08:56:49
  • 2391
Need to make a composite ReactiveAuthenticationManager, for example CompositeReactiveAuthenticationManager, which contai...

Spring Security Add Meta-annotation Parameter Support

  • 2025-01-18 08:56:46
  • 4269
It would be nice if Spring Security's method security meta-annotation support allowed for parameters.For example, it wou...

Spring Security Improve documentation for best practices to enable horizontal scaling with OAuth 2 client applications

  • 2025-01-18 08:56:43
  • 1844
Expected BehaviorIt's a common case with OAuth to have several instances of an horizontal scaled, stateless application ...

Spring Security Horizontal tab (0x09) in HTTP header values rejected by StrictHttpFirewall

  • 2025-01-18 08:56:40
  • 4354
Describe the bugI have a problem where a customer is sending a HTTP request to my Spring application and gets rejected b...
上一页 下一页
.