Starting with Spring Boot 3.0.3 the annotation @EnableReactiveMethodSecurity causes problems on Prometheus metrics (http...

I have this single file in my sample Spring application//skipped imports@SpringBootApplication@Controllerpublic class Sp...

Describe the bugScratched my head at this one for awhile. We have some reactive applications and upon upgrading to Sprin...

This is needed in order to re-add support for CAS.See https://github.com/spring-projects/spring-security/issues/10347 fo...

If a SecurityFilterChain is configured with a CookieCsrfTokenRepository, a CsrfTokenRequestAttributeHandler and the setC...

SummaryI am using spring oauth2 to authenticate&authorize，and using spring redis session. I am getting a Serializati...

Expected BehaviorCurrent BehaviorContextComment From: marcusdacoregioHi @JasmineXieCCD,can you describe your use case in...

Expected BehaviorThe developer can override the redirect strategy in configuration to for OAuth2AuthorizationCodeGrantFi...

Expected BehaviorThe Authentication is set on the SecurityContextHolder. Later, if you need to save SecurityContext , Se...

Describe the bugThe following schema files are not deployed with each release:http://www.springframework.org/schema/secu...

SummarySpring-security-oauth2.xsd should be published under https://www.springframework.org/schema/security/Or was this ...

Expected BehaviorThe SaganPlugin needs to send the username parameter for the personal access token.Current BehaviorThe ...

Based on https://github.com/spring-projects/spring-security/issues/12664, the documentation around SAML 2.0 URIs could b...

Inspired by #12539 The constructor in Saml2LogoutRequest does not check if the parameters received are not nullExpected ...

The logic has been extracted into @springio/antora-extensions/publish-docsearch-config-extension for reuse. We should le...

Describe the bugOpen Telemetry Java Agent version 1.21 don't like the Instrument names produces by Spring Security 6.0 (...

Describe the bugReferencing parameter names in a @PreAuthorize("#x...") fails when using kotlin coroutines.@PreAuthorize...

Describe the bugSpring Web Application not working in Iframe inside Safari Browser and Chrome 80 Browser due to same sit...

On the current 6.0.2 official documentation we have this small sample code related to hierarchical roles:@BeanAccessDeci...

Describe the bugClass CsrfFilter do not behave as spring boot security 2.7.8.Before spring boot security 3, token has be...