Spring Security Add POST Binding for RP-initiated OIDC Logout

  • 2025-01-18 08:12:13
  • 910
Expected BehaviorAccording to the OIDC spec, the RP-initiated global logout request method could be POST or GET. But cur...

Spring Security The "http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)" does not work if x.509 authentication is added.

  • 2025-01-18 08:12:10
  • 2523
Describe the bugThe "http.sessionManagement().sessionCreationPolicy(SessionCreationPolicy.STATELESS)" does not work if x...

Spring Security Requests with no Authorization header provided by client when using @PreAuthorize result in a 500 instead of 401 return code.

  • 2025-01-18 08:12:07
  • 2988
SummaryOut of the box with Spring Security 6.0.2, and after adding a basic REST controller with a @PreAuthorize annotati...

Spring Security @EnableReactiveMethodSecurity and @PreAuthorize not work with Kotlin suspend method

  • 2025-01-18 08:12:04
  • 17189
Describe the bugUsed dependencies:- org.springframework.boot:spring-boot-starter-security:3.0.5- org.springframework.boo...

Spring Security Release 5.8.3

  • 2025-01-18 08:11:59
  • 475
Comment From: lasselindqvistHi. Not sure if this is the right place to mention this, but I believe as the fix for https:...

Spring Security Update reactor-netty to 1.0.31

  • 2025-01-18 08:11:56
  • 138
Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/b727f24c955686a00e05c6...

Spring Security Update reactor-netty to 1.0.31

  • 2025-01-18 08:11:53
  • 138
Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/609d5a71c66b880c1f0308...

Spring Security Update reactor-netty to 1.1.6

  • 2025-01-18 08:11:51
  • 138
Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/95f2b822a7c9e571c0b9e8...

Spring Security CsrfFilter and LazyCsrfTokenRepository use illegal request attribute name javax.servlet.http.HttpServletResponse

  • 2025-01-18 08:11:48
  • 1457
SummaryCsrfFilter sets the request attribute "javax.servlet.http.HttpServletResponse", which is later used by LazyCsrfTo...

Spring Security RelyingPartyRegistrations should not fail when SPSSODescriptor elements are present

  • 2025-01-18 08:11:45
  • 17666
I am trying to migrate from the old SAML extension project to the new. on Spring 5.8.x (not boot).It would be good if i ...

Spring Security RelyingPartyRegistrations should not fail when SPSSODescriptor elements are present

  • 2025-01-18 08:11:42
  • 152
Forward port of #12664 Comment From: jzheauxClosed in https://github.com/spring-projects/spring-security/commit/6c770378...

Spring Security RelyingPartyRegistrations should not fail when SPSSODescriptor elements are present

  • 2025-01-18 08:11:40
  • 152
Forward port of #12664 Comment From: jzheauxClosed in https://github.com/spring-projects/spring-security/commit/6c770378...

Spring Security java.lang.NoSuchMethodError: 'void org.opensaml.saml.saml2.core.AuthnRequest.setIssueInstant(java.time.Instant)'

  • 2025-01-18 08:11:13
  • 2612
Hi, I'm trying to use the RelayState to pass through a redirect URL after successful SAML authentication. We were still ...

Spring Security DefaultMethodSecurityExpressionHandler createSecurityExpressionRoot Should Have Protected Access Instead Of Private

  • 2025-01-18 08:11:10
  • 16735
Describe the bugDefaultMethodSecurityExpressionHandler for v5.8.0 adds a new signature for createSecurityExpressionRoot ...

Spring Security Internationalization

  • 2025-01-18 08:11:07
  • 6110
spring security version: 6.0.1class name: org.springframework.security.authentication.AbstractUserDetailsReactiveAuthent...

Spring Security Spring Circular Dependency with HttpSecurityConfiguration

  • 2025-01-18 08:11:02
  • 5135
Summaryi am having a problem with a circular dependency error. it is thrown when i define a UserDetailsService bean in m...

Spring Security Deprecate shouldFilterAllDispatcherTypes

  • 2025-01-18 08:10:59
  • 787
The shouldFilterAllDispatcherTypes property was added to configure the AuthorizationFilter to apply to every dispatcher ...

Spring Security Add NimbusJwtDecoder#withIssuerLocation

  • 2025-01-18 08:10:57
  • 694
Related #8885, https://github.com/spring-projects/spring-security/issues/9904#issuecomment-863439948It would be nice to ...

Spring Security NimbusReactiveJwtDecoder.JwkSetUriReactiveJwtDecoderBuilder holds a reference to JWSVerificationKeySelector before ConfigurableJWTProcessor.setJWSKeySelector is executed

  • 2025-01-18 08:10:54
  • 3464
The ConfigurableJWTProcessor.setJWSKeySelector(JWSKeySelector) is unable to update the reference used by NimbusReactiveJ...

Spring Security Document non Servlet code separately

  • 2025-01-18 08:10:52
  • 573
The main reference documentation has a servlet section https://docs.spring.io/spring-security/reference/servlet/index.ht...
上一页 下一页
.