When building a SecurityFilterChain from HttpSecurity, a prototype is built in HttpSecurityConfiguration. However, this ...

Related https://github.com/spring-projects/spring-framework/issues/27413Comment From: marcusdacoregioWaiting for https:/...

Expected BehaviorBy default, Spring Security should send this HTTP header:X-XSS-Protection: 0Current BehaviorBy default,...

Saml2WebSsoAuthenticationFilter and Saml2WebSsoAuthenticationRequestFilter are in a package called .servlet.filter.Howev...

Hi Team,We are using Spring Cloud Gateway for basic authentication and routing with the below dependenciesspring-boot-st...

Describe the bughttps://github.com/spring-projects/spring-security/blob/5.7.3/docs/modules/ROOT/pages/servlet/test/mockm...

checking https://docs.spring.io/spring-security/reference/servlet/test/mockmvc/oauth2.html I see no way to test client c...

When (Reactive)AuthenticationManager throws or resolves to an AuthenticationServiceException, Authentication(Web)Filter ...

The Supplier<SecurityContext> in AnonymousAuthenticationFilter gets invoked several times on each request. Essenti...

Given https://github.com/spring-projects/spring-security/issues/11958 and https://github.com/spring-projects/spring-secu...

We should look in every location and require that if an authorization manager abstained, then access should be denied. O...

Expected BehaviorI want to be able to change all SAML2 URLs to be able to e.g. add a prefix.Current BehaviorSome URLs ar...

[x] #11589[x] #11588[x] #11586 [x] #11587[x] #11584 [x] #11585 [x] #11565 [x] #11564 [x] #11519[x] #11518 [x] #11517[x]...

RelyingPartyRegistration contains SAML 2.0 Metadata for both the relying party and its associated asserting party.It wou...

Expected BehaviorCookieCsrfTokenRepository can be configured with a setSameSite method taking an enum as arg to allow to...

Chrome 80 changed the way it handles cookies that do not set a SameSite attribute. More information: https://blog.chromi...

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/655a1e345ee5ebf5e9e362...

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/0521bb1af59c820a6d7cec...

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/0521bb1af59c820a6d7cec...

Comment From: marcusdacoregioClosed via https://github.com/spring-projects/spring-security/commit/2c2603ba0fe06631e1bcbf...