Spring Security Handling different serialVersionUID in UsernamePasswordAuthenticationToken when Spring version was changed

SummaryAfter migration from Spring Security 4.0.X to 4.1.0.RELEASE I have a problem with deserialization of tokens alrea...

Spring Security OAuth2AuthorizationExchange is not serializable

The OAuth2AuthorizationExchange class should be serializable since it is used as a field of OAuth2AuthorizationCodeAuthe...

Spring Security SEC-3212: Unable to use @PostFilter with Spring Data paging

Chen Li (Migrated from SEC-3212) said:I was trying to authorize apis work with Spring Data JPA. When I try to authorize ...

Spring Security spring-build-conventions

Describe the bugA clear and concise description of what the bug is.To ReproduceSteps to reproduce the behavior.Expected ...

Spring Security IllegalStateException: Couldn't find FilterChainProxy

Describe the bugwhen security web run in debug mode, it throw IllegalStateException: Couldn't find FilterChainProxyTo Re...

Spring Security [Question] How to register custom AuthenticationProvider in reactive programming model

I'm trying to register my own AuthenticationProvider. My config:@EnableWebFluxSecurityclass SecurityConfig { @Bean fun...

Spring Security StackOverflowError due to AnonymousAuthenticationFilter + Logback TurboFilter accessing SecurityContext

Describe the bugWhen upgrading an internal library to Spring Security 5.8, we encountered a StackOverflowError caused by...

Spring Security Kotlin Dsl - Spring Security with h2-console not working as expected

Describe the bugThis is my spring security configuration and using h2 with dashboard not working when i use raw url insi...

Spring Security Under certain load the HTTP header response has changed

During a JMeter test I have discovered that after 20/30 seconds of test, the HTTP response is changed.As far as I have s...

Spring Security Configuration examples in docs are out of date

The Java Configuration and Kotlin Configuration examples in the docs use the authorizeRequests DSL method. These example...

Spring Security The Custom Provider implementing the AuthenticationProvider interface is called twice and fails

I don't think this is a bug, and it's implemented to work twice, but I'm wondering if there's a way to do it, so I leave...

Spring Security SecurityContextHolderStrategy bean should be copied to SecurityContextHolder by default

Now that applications can use a SecurityContextHolderStrategy bean, there's value in assisting applications with what ma...

Spring Security Missing native-image reflection hint for HandlerMappingIntrospectorCachFilterFactoryBean

Describe the bugSpring Security 6.2.1 fails to register appropriate native image hints for: HandlerMappingIntrospectorCa...

Spring Security No introduction to CachingUserDetailsService in the documentation

Expected BehaviorThere should be a subsection in https://docs.spring.io/spring-security/reference/ describing org.spring...

Spring Security PathPatternParserServerWebExchangeMatcher should accept multiple path patterns strings

Expected BehaviorPathPatternParserServerWebExchangeMatcher matcher = new PathPatternParserServerWebExchangeMatcher(&quot...

Spring Security Security configuration is failed to be initialized in a Servlet 6.0 container

Describe the bugI tried to update my example Spring project to the latest Spring 6.1 and Spring Security 6.2, but it can...

Spring Security Simplify Request Authorization Path Extraction

authorizeHttpRequests does not have direct expression support, this can create a slight issue when migrating expressions...

Spring Security Excessive Redirects on POST Requests with Multipart Form

DescriptionI am experiencing a problem with Spring Security 6.2 in a Spring Boot 3.2 application, particularly when hand...

Spring Security Multitenancy tokenvalidation example should be adjusted

Hi everyone,First of all I am very grateful for the good examples in your documentation! I recently however stumbled acr...

Spring Security Change the default implementation of Saml2AuthenticationRequestRepository to store and load AuthnRequests based on the ID instead of the session

Expected BehaviorSaml2AuthenticationRequestRepository is implemented in a way that allows setting SameSite to Lax or Str...
上一页 下一页
.