Spring Security Simplifying Spring Security

This issue is a theme for the Spring Security 6.1 release. Issues that relate to this will be added below.[x] gh-12629

Spring Security Concurrent session management not working. Setting Constraint on maximum session for session management

Bug descriptionThe bug is related to session management in the SecurityFilter chain. Setting max session in session mana...

Spring Security Integration Test is failing with CSRF error even though CSRF is disabled in Spring Security config

I have configured Spring Security to disable CSRF as follows:@Configuration@EnableWebSecurity@EnableMethodSecuritypublic...

Spring Security mockOAuth2Login() does not work in collaboration with Spring Cloud Gateway and TokenRelayGatewayFilter

Describe the bugWe implemented a Spring Cloud Gateway which is secured using an OAuth2 Login. It also relays the OAuth2 ...

Spring Security Support for pagination while using ACL based @PostFilter

SummaryWhen an entity repository is under ACL based security, it suffers from a huge issue of being unable to handle pag...

Spring Security HttpSecurity javadoc has broken links

The following links in the HttpSecurity javadoc are broken, pointing to "3.2.x" instead of "current", link below takes y...

Spring Security Allow configuring the ActiveDirectoryLdapAuthenticationProvider in AuthenticationManagerBuilder

Currently, we are able to set standard LDAP provider via:@Configurationpublic class WebSecurityConfig extends WebSecurit...

Spring Security Stack overflow error when add RequestHeaderAuthenticationFilter

I'm usingSpring Boot 2.7.12Spring Security 5.8.3(I did test with Spring Boot 3.1.0, and I am facing the same issue)Descr...

Spring Security Exception messages cannot be properly internationalized

Describe the bugA clear and concise description of what the bug is.AbstractUserDetailsAuthenticationProvider class defin...

Spring Security Enhancement FormLoginConfigurer Adaptation custom UsernamePasswordAuthenticationFilter

Expected Behaviorspring security version:5.7.6custom UsernamePasswordAuthenticationFilter unable obtain HttpSecurity con...

Spring Security Investigate build failing with unauthorized

https://github.com/spring-projects/spring-security/actions/runs/5120176165/jobs/9206368017https://spring.io/blog/2022/12...

Spring Security Allow java.lang.Long in whitelist for Jackson security

Expected BehaviorWhen using spring-security-oauth2-client in combination with spring-session-data-redis and enabling JSO...

Spring Security In version 6.x, customizing AbstractAuthenticationProcessingFilter, AuthenticationProvider, and AbstractAuthenticationToken cannot log in successfully.

In version 6.x, customizing AbstractAuthenticationProcessingFilter, AuthenticationProvider, and AbstractAuthenticationTo...

Spring Security Add initial Native section to reference docs

Forward port of issue #12029 to 6.1.x.Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-...

Spring Security Align Resource Server documentation with Boot's capabilities

Since 2.7.0 (https://github.com/spring-projects/spring-boot/pull/29084), Boot's had support for auto-configuring a valid...

Spring Security Document How to Handle Method Security in Native Image

Expected BehaviorSecurity SPEL (such as @PreAuthozied) needs custom native-image hints (such as @RegisterReflectionForBi...

Spring Security Add initial Native section to reference docs

To make it easier to communicate what is supported in Spring Security and what are the limitations when working with nat...

Spring Security Cannot build \spring-security\samples\boot\saml2login project from source.

Describe the bugCannot build \spring-security\samples\boot\saml2login project from source.To ReproduceClone repository (...

Spring Security Support Mono<Boolean> for Method Security SpEL expressions

SummaryReactive method security requires the SpEL expression to return Boolean which does not work of the logic to deter...

Spring Security Cannot use HTTP Proxy for OAuth2 client

I have configured OAuth2 client in Spring Security as belowIt works well with Internet connection. When I run the app wi...
上一页 下一页
.