Spring Security Spring SAML service provider - Custom AuthnRequest

  • 2025-01-18 07:40:09
  • 3501
I saw the new approach to the SAML Service Provider configuration in Spring. I admit that the new Saml2AuthenticationReq...

Spring Security Adding 'audience' to ClientRegistration for OAuth2.0 client-credentials flow

  • 2025-01-18 07:40:06
  • 3849
SummaryThere doesn't seem to be a way to specify the audience/resource server for a token request to an authorization se...

Spring Security XML-based configuration for Spring SAML2

  • 2025-01-18 07:40:03
  • 6372
ContextIn our current project we've been using spring saml extension for a couple of years. It works fine so far except ...

Spring Security Support absolute URI’s in authentication success redirects for WebFlux

  • 2025-01-18 07:40:00
  • 13122
Expected BehaviorRedirectServerAuthenticationSuccessHandler/ServerRequestCache.getRedirectUri() should allow to redirect...

Spring Security Spring Security SAML2 - AuthN Request POST Binding requires CSP Header unsafe-inline scripts

  • 2025-01-18 07:39:57
  • 1151
Expected BehaviorWhen using the Content Security Policy (CSP) header and doing a SAML2 AuthN Request POST Binding, add s...

Spring Security Improve OAuth2LoginConfigurer with more configuration options

  • 2025-01-18 07:39:54
  • 752
Expected BehaviorI want to customize the authenticationResultConverter field in the OAuth2LoginAuthenticationFilter.just...

Spring Security Missing xsd update after gh-11762

  • 2025-01-18 07:39:50
  • 167
"security-context-explicit-save" has bean defaulted to true with gh-11762, but spring-security-6.0.xsd was not updated.C...

Spring Security Webflux - Csrf token is not regenerated after each request

  • 2025-01-18 07:39:48
  • 4813
Describe the bugWith cookie csrf enabled in spring security in Webflux, the XSRF-TOKEN cookie is only generated once. An...

Spring Security ReactiveSecurityContextHolder.getContext() is null always with custom AuthenticationToken (Sample provided)

  • 2025-01-18 07:39:44
  • 3757
val messageByUsername: Mono<String> = ReactiveSecurityContextHolder.getContext() .map(Secu...

Spring Security Session is created even SessionCreationPolicy is STATELESS

  • 2025-01-18 07:39:42
  • 10880
Describe the bugAfter updating from spring boot 2.6.11 to spring boot 2.7.3 I noticed there was JSESSIONID in the http r...

Spring Security Getting 404 Http Status on GET request after adding contextpath in antMatchers().permitAll()

  • 2025-01-18 07:39:37
  • 7848
I am doing poc on spring social login. I have created new spring boot project and created a test controller in it and in...

Spring Security Allow custom RestTemplate for ClientRegistrations.fromIssuerLocation

  • 2025-01-18 07:39:33
  • 740
Expected BehaviorAllow to use custom RestTemplate configuration for ClientRegistrations.fromIssuerLocation.Current Behav...

Spring Security Allow the Oauth2 password authorisation grant without username/password for x509 client certificate authentication

  • 2025-01-18 07:39:31
  • 611
Expected BehaviorAllow the PasswordReactiveOAuth2AuthorizedClientProvider to be used without password nor username.Curre...

Spring Security Not able to set relayState

  • 2025-01-18 07:39:28
  • 1234
There is an interface Saml2AuthenticationRequestResolver with resolve method and return type of the method is .Now Abst...

Spring Security CsrfWebFilter not generating the CSRF token with Webflux

  • 2025-01-18 07:39:25
  • 16990
SummaryI have a Spring Webflux application secured by Spring Security with CSRF protection enabled by default. In this a...

Spring Security Document that Method Security Co-routine Support Skips Downstream Interceptors

  • 2025-01-18 07:39:22
  • 561
Related to https://github.com/spring-projects/spring-framework/issues/22462#issuecomment-1054775563 - PrePostAdviceMetho...

Spring Security ClassCastException when use oidcUserService delegate

  • 2025-01-18 07:39:18
  • 26751
Hello!I try to login user in my application, when using OAuth2 client and spring-boot-starter-parent:2.4.4.But, When I u...

Spring Security Setup Forward Merge

  • 2025-01-18 07:39:05
  • 121
Forward port of issue #11736 to 5.7.4.Comment From: github-actions[bot]Fixed via f774c4de394c8e374e073e15a3970a92a5963e0...

Spring Security RemoteJwkSet is not refreshed when encountering an unknown KID

  • 2025-01-18 07:39:02
  • 186
Backport of gh-11621Comment From: github-actions[bot]Fixed via 53a3ff89320f6f56579418639ff64c1ed689248cComment From: git...

Spring Security HttpSecurity Bean does not set DefaultAuthenticationEventPublisher

  • 2025-01-18 07:38:59
  • 186
Backport of gh-11449Comment From: github-actions[bot]Fixed via c7912c551b94a5f617cfa6b4d821926d28dc12ceComment From: git...
上一页 下一页
.