This issue addresses the reactive counterpart of #7655.Related #7889Comment From: drgebIs there any example of the JDBCR...

The preparation guide is using checkboxes for subtasks. While there may be value in structuring the preparation guide di...

Describe the bugSpring Security SAML2 Logout is not working with Spring Session Data MongoDB. Our setup fully works if I...

Expected BehaviorAs a service provider, it would be great if we could override the following parameter in a SAMLRequestF...

Describe the bugIf a config contains multiple SecurityFilterChain definitions, only the first definition is processes, a...

Describe the bugWhen server.forward-headers-strategy=framework is used in a WebFlux project that makes use of an IpAddre...

Forward port of https://github.com/spring-projects/spring-security/issues/11888Comment From: jzheauxClosed in dd30694979...

As part of #10902 update the Javadoc of https://github.com/spring-projects/spring-boot/blob/master/spring-boot-project/s...

While upgrading Spring Boot from 2.6 to 2.7, one of our tests started failing.The test verifies thread switching with We...

/cc @rwinch [x] https://github.com/spring-projects/spring-security/issues/11466[x] https://github.com/spring-projects/sp...

SummaryBy logging out the PersistentTokenBasedRememberMeServices removes all the tokens from database that are tied to t...

Describe the bugConfiguring OidcClientInitiatedServerLogoutSuccessHandler as a logoutSuccessHandler and WebSessionServer...

In previous Spring versions, bean overriding was allowed, but Spring 5 brings disabling by default. Its OK, but not for ...

The default SecurityContextRepository for stateless applications is now RequestAttributeSecurityContextRepository. Howev...

Hello,spring-security-6.0.0-M7 does not contain spring-security-cas.spring-security-cas is a part of Spring Security tha...

This is a reminder to update Spring Framework to the latest milestone when preparing for the next release. Once resolved...

Describe the bugEnabling the CookieServerCsrfTokenRepository causes a SESSION cookie to no longer be set.To ReproduceTak...

The FilterSecurityInterceptor and AuthorizationFilter now apply to every request by default.This led to a problem from t...

The Kotlin AuthorizeRequestsDsl has multiple signatures for the authorize method including the following two:authorize(p...

When configuring security rules, it will be very helpful to understand what we are configuring. Example with this kind o...