Unable to deploy Spring Boot Application 3.1.5 into Tomcat 10.1.14 with JDK 17.0.8.(Spring Security 6.1.5)I got this er...

Describe the bugAn error message from //.requestMatchers("/error").permitAll() This method cannot decide whether these p...

Describe the bugHTTP GraphQL call which includes two internal calls to REQUEST and ASYNC dispatchers.Custom Auth filter ...

Expected BehaviorAuthorizationManager[Before/After]ReactiveMethodInterceptor should suport Kotlin coroutinesCurrent Beha...

SummaryJdbcUserDetailsManager does not implements UserDetailsPasswordService like InMemoryUserDetailsManagerActual Behav...

Describe the bugThere's one of the links on the home page that does not lead you to the desired section. This is because...

Describe the bugWhile testing spring authorization server I noticed my client secrets were updated, but not my user secr...

After enabling fixed session protection, the authorization information of SecurityContextHolder is not updated when the ...

We are using spring-security-oauth2-client with client credentials flow in a batch application to call a service that is...

We should rename the cloneSamples task to cloneRepository to promote reusability. We can pass the arguments that we need...

In this line, the Saml2MetadataFilter sends out the response without specifying an encoding. The response will therefore...

It's not easy to customize WebExpressionAuthorizationManager with a custom expressionHandler, when defining the web secu...

Describe the bugWhen someone tries to access public API with invalid access token in HttpOnly cookie format or in Author...

As a follow up to gh-13764, the following classes can be updated to support suspended functions with Kotlin coroutines:A...

Describe the bugRight now DefaultLoginPageGeneratingFilter#getLoginErrorMessage can return nullable exception message. T...

Expected BehaviorIf using Spring Security in-app authentication/authorization, I would like the flexibility I have when ...

Describe the bugSSL is enabled by default for my spring-boot apps (I have set SERVER_SSL_KEY_PASSWORD, SERVER_SSL_KEY_ST...

DescriptionAfter upgrading Spring Security from version 5.8.4 to 5.8.6, the ApplicationContext configured via AbstractAn...

Describe the bugPermitAll routes returns 401 when token is provided, but expired. Main problem with BearerTokenAuthentic...

The documentation confuses idempotent with read-only:https://docs.spring.io/spring-security/reference/features/exploits/...