Spring Security Access denied for permit all matchers

Describe the bugI migrated to Spring Boot 3 and Spring Security 6, and when I started testing the APIs that are permitte...

Spring Security Outdated CONTRIBUTING.adoc?

Describe the bugFollowing CONTRIBUTING.adoc is not enough to get an IDE ready to run unit-tests and contribute. I could ...

Spring Security Infinite recursion in WebSecurityConfigurerAdapter.java.

BugInfinite recursion in WebSecurityConfigurerAdapter.java.Refer PR where this issue and its solution are committed.To R...

Spring Security Add an option to set the SameSite policy in the CookieCsrfTokenRepository

Expected BehaviorThe class org.springframework.security.web.csrf.CookieCsrfTokenRepository should allow settingset the S...

Spring Security Update jackson-datatype-jsr310 to 2.14.1

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/a3c3b627e45dcc66e91906...

Spring Security Update jackson-databind to 2.14.1

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/a3c3b627e45dcc66e91906...

Spring Security Update reactor-netty to 1.1.1

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/e1d61aff62c55f3ac7f42d...

Spring Security Serialize Non-Standard Claims On OidcIdToken To java.util Types Instead Of com.nimbusds.jose.shaded.json

Expected BehaviorWhen converting the claims from the ID token in an OAuth2AccessTokenResponse it would be useful, for th...

Spring Security DefaultLdapAuthoritiesPopulator throws NullPointerException

Describe the bugI want to evaluate the LDAP entries of a user to derive the role of the user. The attribute I have chose...

Spring Security Update reactor-netty to 1.0.26

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/aaa611c5b067b9be616ac2...

Spring Security Update reactor-netty to 1.0.26

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/4ddecdbe364e72baffb2a9...

Spring Security Update jackson-databind to 2.13.4.2

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/94c8830f76ac4ebfacd412...

Spring Security Update jackson-databind to 2.13.4.2

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/58e8fe837f87312c5f616a...

Spring Security Update reactor-netty to 1.0.26

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/aa1934ee9541c149432eba...

Spring Security Error in ACLS document

Please could you take a look at this document.ACLS DocumentIn the points that describe the four (4) tables used in the d...

Spring Security Spring OAuth2 sometimes redirects to (undocumented) {baseUrl}/authorize/oauth2/code/{registrationId}

Expected BehaviorAccording to the spring security docs [1][2][3][4], the default Authorization Response baseUri (redirec...

Spring Security Wrong principal type OIDC

SummaryI configured a Spring Boot app to use OIDC login. The (minimalistic) security confguration is provided below.Logg...

Spring Security CSRF Token not created in same format as in XSRF Token Cookie

Describe the bugI'm using CSRF Token to secure my POST Requests I have enabled CSRF together with CookieCsrfTokenReposit...

Spring Security ProxyFactoryBean on AuthenticationManager does not work in native mode

If we don’t find an AuthenticationManager bean during configuration, we create a ProxyFactoryBean to lazily initialize t...

Spring Security SessionManagement cannot manage a RememberMe authentication session

Describe the bugSessionManagement cannot manage a RememberMe authentication session.To Reproduce1. Turn on the RememMe a...
上一页 下一页
.