Spring Security The points in the FAQ *Why Not Use web.xml Security* are not quite appropriate

  • 2025-01-18 08:37:45
  • 2697
In Spring Security, FAQ Why Not Use web.xml Security? section, it states that some disadvantage when implementing securi...

Spring Security /oauth2/revoke endpoint returns status 200 but access token still valid in spring security 6

  • 2025-01-18 08:37:42
  • 927
Describe the bugi have writen custom controller to logout user and in same controller i am calling .oauth2/revoke api us...

Spring Security If user does not do anything (i.e. use mouse, key press, scrolling etc) for 2 mins then user will be logged out automatically and the page will be redirected to login page:

  • 2025-01-18 08:37:39
  • 1280
Describe the bugA make a demo app that is work on the signup page and login page but when the user not active in 2 min t...

Spring Security AbstractSecurityInterceptor has old strategy after change of strategyName

  • 2025-01-18 08:37:36
  • 5703
Describe the bugAfter updating to the version 5.8.1, we have a problem with the AbstractSecurityInterceptor.In our code ...

Spring Security Spring Security 6.1.4 breaks authentication security context

  • 2025-01-18 08:37:32
  • 3054
Describe the bugAfter updating to Spring Security 6.1.4 (as part of Spring Boot 3.1.4), the authentication context is no...

Spring Security CookieServerCsrfTokenRepository does not add cookie

  • 2025-01-18 08:37:27
  • 15837
SummaryI have modified the https://github.com/rwinch/spring-security-sample boot-webflux branch to add CSRF using the Co...

Spring Security Untitled page title in documentation

  • 2025-01-18 08:37:22
  • 1174
Expected BehaviorShow title according to page section.Current BehaviorSpring Security > Servlet Applications > Tes...

Spring Security Run tests on JDK 21

  • 2025-01-18 08:37:12
  • 222
Comment From: sjohnrRelated gh-12790Comment From: sjohnrReverted (temporarily) via d76e15d708e8667cd56e6db78cdbab4e96df4...

Spring Security WebTestClient + Spring Security MockMvc Support

  • 2025-01-18 08:37:06
  • 606
Spring Security's MockMvc Support does not currently work with WebTestClient. This is a list of issues related to this p...

Spring Security Verify ReactorContext when using Virtual Threads

  • 2025-01-18 08:37:01
  • 127
We need to verify that using Reactor Context and Virtual threads behaves as expected in terms of functionality and perfo...

Spring Security Integration Tests with Virtual Threads

  • 2025-01-18 08:36:57
  • 301
From the Spring Security side we do not manage our own threads, but use existing abstractions. However, we do support pr...

Spring Security Improve the default authentication entry point settings when formLogin is enabled

  • 2025-01-18 08:36:52
  • 1456
Once formLogin is enabled, LoginUrlAuthenticationEntryPoint will become the only default authentication entry point. Htt...

Spring Security Saml-Metadata with special characters is corrupted

  • 2025-01-18 08:36:48
  • 160
Forward port of #13861Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/...

Spring Security Saml-Metadata with special characters is corrupted

  • 2025-01-18 08:36:43
  • 161
Forward port of #13860 Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit...

Spring Security Saml-Metadata with special characters is corrupted

  • 2025-01-18 08:36:39
  • 161
Forward port of #13776 Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit...

Spring Security Saml-Metadata with special characters is corrupted

  • 2025-01-18 08:36:33
  • 628
Describe the bugSaml metadata is corrupted once it contains special characters.To ReproduceConfigure the metadata to con...

Spring Security Mark ApacheDS classes for removal

  • 2025-01-18 08:36:29
  • 137
The deprecated ApacheDS classes should be marked for removal in 7.0We should also document in "Preparing for 7.0" to sto...

Spring Security CookieClearingLogoutHandler cannot delete cookie when servlet context path is set

  • 2025-01-18 08:36:22
  • 5396
Describe the bugWhen my application is running on Tomcat with context path /foo, JSESSIONID session cookie is NOT delete...

Spring Security .requestMatchers("/xxx").permitAll() not working in Spring Security 6 with .csrf(csrf -> csrf.csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse()))

  • 2025-01-18 08:36:18
  • 4976
SummaryGitHub code scanning has reported a high-risk vulnerability titled "Disabled Spring CSRF protection". After I m...

Spring Security in Spring security 5 how to properly replace j_spring_security_check - how the POST /Login should work

  • 2025-01-18 08:36:13
  • 1323
Describe the bugA clear and concise description of what the bug is.To ReproduceSteps to reproduce the behavior.Expected ...
上一页 下一页
.