Spring Security Restructure AuthenticationServiceException handling

An AuthenticationServiceException represents something that went wrong on the server side. As such, it shouldn't be hand...

Spring Security Support custom form parameters for client_credentials Access Token Request

SummaryThere is no way currently to pass custom form parameters as part of OAuth2ClientCredentialsGrantRequestEntityConv...

Spring Security Remove LazyCsrfTokenRepository

As LazyCsrfTokenRepository is deprecated, it can now be removed.Note that a number of components use setAttribute(HttpSe...

Spring Security Incorrect scope map fix

Describe the bugScope mapping handling changed with https://github.com/spring-projects/spring-security/issues/12112.http...

Spring Security Add support for RFC7807-style error responses

Expected BehaviorThere should be an option to enable RFC7807-style ProblemDetail-responses when using Spring Security 6....

Spring Security Kotlin samples using deprecated API

Describe the bugThe page about Kotlin Configuration for Servlet Applications suggests API that has been marked as deprec...

Spring Security AuthenticationProviderBeanDefinitionParser does not support UserDetailsPasswordService

Summary<security:authentication-provider> XML configuration element is missing a user-details-password-service chi...

Spring Security ChannelProcessingFilter misuse of 'committed'

SummaryChannelProcessingFilter short-circuits the entire filter chain if the response is already committed.Actual Behavi...

Spring Security Improve javadoc for User's withDefaultPasswordEncoder method to include Spring Boot CLI as an alternative too

Currently For SS 6.1.1 the User class has the withDefaultPasswordEncoder deprecated method with its respective javadoc.A...

Spring Security Create a dedicated/obvious menu item to arrive quickly to "Lambda DSL" for Reference Documentation

Expected BehaviorDo more intuitive to know how to arrive to the Use the Lambda DSL section for the Reference Documentati...

Spring Security Update/Improve documentation and consistency of the complete list for Spring Security Filter Chain

Expected BehaviorHave a consistent central location of the complete list of Filters involved in the Spring Security filt...

Spring Security Spring Security OAuth2 - Unable to start Spring Boot App if configured with multiple external Auth Servers and failed to connect to one of them

SummaryFail to start a Spring Boot Application configured with oauth2Login() and with multiple external Authorization S...

Spring Security CsrfFilter doesn't support to override the methods shouldNotFilterAsyncDispatch() and shouldNotFilterErrorDispatch()

Describe the bugMy project is using Spring 5.1.13.RELEASE. It doesn't use Spring Boot. When I upgrade the Spring Securit...

Spring Security Cannot add metadata filter before Saml2WebSsoAuthenticationFilter

Describe the bugI am using spring security 5.8.5 and trying to get the metadata filter working. I am following the instr...

Spring Security Use default PathPatternParser instance

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/8f5793afb1345b4312c23d...

Spring Security spring-boot-starter-webflux to reduce path traversal capability

Expected BehaviorReject path traversal url in Spring WebFlux, e.g. GET /download/..%2F..%2FpasswordsWe'd better add Http...

Spring Security AccessDeniedException message localization

Describe the bugmessage of AccessDeniedException is not localizedin the class ObservationAuthorizationManager it uses ha...

Spring Security Referrer Header is set in Reactive Web Applications by default, although doc says it is not.

Describe the bughttps://docs.spring.io/spring-security/reference/reactive/exploits/headers.html#webflux-headers-referrer...

Spring Security Reintroduce expressions for http security

When trying to migrate our codebase to Spring 3, I realized, that our security configuration cannot be migrated easily.C...

Spring Security Allow auto-submit form for POST saml authentication requests to be customizable

Expected BehaviorAllow the users to render their own auto submit form similar to similar to metadata download OpenSamlMe...
上一页 下一页
.