玖涯软件开发|java/go/python

Spring Security Different behaviour of @RolesAllowed annotation on @EnableMethodSecurity vs @EnableGlobalMethodSecurity

Describe the bugConsider the following controller:@RestControllerpublic class SecuredController { @GetMapping(path = ...

Spring Security Add remaining methods from ExpressionUrlAuthorizationConfigurer to MessageMatcherDelegatingAuthorizationManager

Related #11360 [ ] Add rememberMe to MessageMatcherDelegatingAuthorizationManager[ ] Add fullyAuthenticated to MessageMa...

Spring Security SAML2 Login fails with CSP in chrome based browsers

I have checked out the branch 5.8.x, started ./gradlew :servlet:spring-boot:java:saml2:login:bootRunand opened http://lo...

Spring Security CsrfFilter Accesses Session on Every Request

[x] #11700[x] #11699java.lang.RuntimeException: getSession(false) at example.SessionAccessedFilter$1.getSession(Sessi...

Spring Security Add CsrfFilter.csrfAttributeName

CsrfFilter uses CsrfToken.parameterNameto specify the attribute name that the CsrfToken is set on. This doesn't make sen...

Spring Security Add Support for LazyCsrfTokenRepository to Defer Loading CsrfTokens

LazyCsrfTokenRepository supports lazily saving the CsrfToken which allowed for lazily saving the CsrfToken. However, it ...

Spring Security NamespaceLdapAuthenticationProviderTests Should Use Dynamic Port

Currently NamespaceLdapAuthenticationProviderTests use a fixed port for LDAP tests which can cause test failures if the ...

Spring Security OidcIdTokenDecoderFactory can support multiple SignatureAlgorithm

Expected BehaviorFor Resource Server, the Decoder can fetch different algorithms based on the public key endpointhttps:/...

Spring Security GitHubMilestoneApiTests due_on Should Use LocalDate

GitHubMilestoneApiTests uses Instant.now() for due_on. Since Instant.now() is UTC time based, isMilestoneDueTodayWhenDue...

Spring Security Jwt decoding should support multiple algorithms

SummaryWe should add a strategy where Jwt decoders can delegate to other Jwt decoders based upon the algorithm that is i...

Spring Security Support For Reactive RememberMe Authentication

I can't find the support for Reactive RemberMe Authentication based on Token and Persistence Store inReactive Web Securi...

Spring Security Update mockk to 1.12.5

Comment From: marcusdacoregioThere are some errors when updating this dependency:> Task :spring-security-config:compi...

Spring Security Update reactor-netty to 1.0.22

Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/da09788be988ff3462e118e...

Spring Security Add test support for WebClient using ServletOAuth2AuthorizedClientExchangeFilterFunction#setDefaultOAuth2AuthorizedClient(true)

Expected BehaviorHave an easy mechanism to use .with(oauth2Login()) on a service that uses the ServletOAuth2AuthorizedCl...

Spring Security RequestAttributeSecurityContextRepository.loadContext(HttpServletRequest) should never return null SecurityContext

Describe the bugBased on this comment, if the request attribute is null, an error is thrown from the strategy:java.lang....