Spring Security CSRF enabled /logout could return 405 instead of 404 for non-POST requests

Actual BehaviorGET request to /logout produces generic error and 404 status.Expected BehaviorThere could be more clear e...

Spring Security SEC-2104: Wrong <http> configuration gets accepted and leads to runtime errors.

Alex Khromov (Migrated from SEC-2104) said:Below are two snippets from my spring-security.xml. The first one is buggy th...

Spring Security Resource Server Package Name Inconsistencies

Some of the classes in oauth2-resource-server could be better aligned with the whole.For example, if XYZ represents the ...

Spring Security Remove OpenSAML3 support

Currently, the spring-security-saml2-service-provider supports the two versions of OpenSAML: 3 and 4.Since the classes f...

Spring Security WebAuthenticationDetails#hashCode often returns zero

SummaryIdeally, the hashCode method defined by a class should return distinct integers for distinct objects. Not doing s...

Spring Security Consider LoggerListener in authorization package

Comment From: jzheauxI don't think we should do this, given logging is integrated directly into Spring Security. Also, #...

Spring Security Configurable authentication converter for resource-servers with token introspection

Expected BehaviorSomething like the JwtAuthenticationConverter but for token instrospection.My first thougt is, inside O...

Spring Security SAML Logout move onload script to body tag

With PR #11676 the submit of the form was moved fron body to inline script. But it was no removed on all onLoad body tag...

Spring Security Provide ability to customize the SAML authnRequest URL of OpenSamlAuthenticationRequestResolver

Currently there is no way to customize the SAML authn request processing URL without copying entire classes of existing ...

Spring Security Update jackson-databind to 2.13.4

Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/3a584e044a8abd506a0d719...

Spring Security Update jackson-datatype-jsr310 to 2.13.4

Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/3a584e044a8abd506a0d719...

Spring Security Update reactor-netty to 1.1.0-M6

Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/222ebeab3bfa552ebe1917f...

Spring Security Update htmlunit-driver to 2.64.0

Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/f2a073b8062c43453f36b05...

Spring Security HttpSecurityDsl should support apply method

Expected Behavior``` @Bean fun authSecurityFilterChain(http: HttpSecurity): SecurityFilterChain { http { ...

Spring Security Update org.jetbrains.kotlin to 1.7.20-RC

Comment From: marcusdacoregioWe are gonna stick with the same version that Spring Framework uses, which is 1.7.10

Spring Security Update Gradle Enterprise plugin to 3.11.1

Forward port of https://github.com/spring-projects/spring-security/pull/11827Comment From: marcusdacoregioClosed via htt...

Spring Security Update Gradle Enterprise plugin to 3.11.1

Forward port of https://github.com/spring-projects/spring-security/pull/11827Comment From: marcusdacoregioClosed via htt...

Spring Security Update Gradle Enterprise plugin to 3.11.1

Forward port of https://github.com/spring-projects/spring-security/pull/11827Comment From: marcusdacoregioClosed via htt...

Spring Security Multiple @Bean public SecurityFilterChain samlFilterChain(HttpSecurity http)

I want to create a fallback security chain that means it will authorize all the request but i want to register it last ....

Spring Security Simplify checkSamples task

Talking with the Gradle team, it was discovered that a build scan won't be created for the underlying build, as we do us...
上一页 下一页
.