Current situation:We are using SpringBoot 3.1 in preproduction and we have noticed that new longTaskTimer metrics "sprin...

Describe the bugWe use Spring Boot version is 3.1.4 with Webflux as well as Spring Cloud Gateway for our application. Th...

When upgrading to Spring Boot 3 we had issue in new spring security metrics exposed with Micrometer. Issue seems to be t...

Comment From: sjohnrAdditionally, we should announce the next release when a release date changes (the milestone is edit...

Mikhail Mazursky (Migrated from SEC-1908) said:I was updating spring 3.0.x to 3.1.0 and one of my tests (with Mockito) s...

Add a feature where when the principal is a JWT token, it can automatically be converted to UserDetails object.Comment F...

Comment From: jzheauxHi, @AnkitMishra02! This is a duplicate of https://github.com/spring-projects/spring-security/issue...

Since https://github.com/spring-projects/spring-security/pull/13857 was not released in 6.2, it should not be in the bul...

https://github.com/spring-projects/spring-security/blob/515e8216b18a6b7757f69a949014ede74c9676aa/saml2/saml2-service-pro...

Rob Winch (Migrated from SEC-2390) said:Include support for HMAC-Based One-time Password (HOTP) algorithm specified in R...

With Spring Security 3 (and the XML files) seems like it was possible to customize the behavior on what happens when a b...

If you use API gateway, you need to adjust the redirected host name more flexibly.I would like to specify the redirectio...

SummaryWe should provide a simple way to integrate OAuth support with RestTemplate. This support would be similar to the...

Expected BehaviorOnly save the client credentials token once in the InMemoryOAuth2AuthorizedClientService.Current Behavi...

Using Spring Boot 2.7.7. I have the following service:@Servicepublic class MyService{ ... @PreAuthorize("hasAuthority(...

Describe the bugAs the title says ... the NimbusReactiveJwtDecoder is created with default web client initialized static...

Current Behavior:The Spring AOT Smoke Tests contains tests that are run periodically in order to verify our compatibilit...

Expected BehaviorUse case-insensitive matching in loadUser() method!userInfo.getSubject().equalsIgnoreCase(userRequest.g...

Constructing an MvcRequestMatcher can be confusing since it's unclear where to obtain a HandlerMappingIntrospector from....

Forward port of https://github.com/spring-projects/spring-security/issues/14165Comment From: jzheauxClosed in 5958828113...