Spring Security OpenSaml4AuthenticationRequestResolver method resolve

  • 2025-01-18 07:36:43
  • 2824
In spring-security-saml2-service-provider 5.7.2. the class OpenSaml4AuthenticationRequestResolver has this method:@Overr...

Spring Security Webflux filter ExceptionTranslationWebFilter always execute commenceAuthentication before subscription.

  • 2025-01-18 07:36:40
  • 2917
Describe the bug @Override public Mono<Void> filter(ServerWebExchange exchange, WebFilterChain chain) { ret...

Spring Security Reactive Security: Controller method annotated with @PreAuthorize should be considered in test

  • 2025-01-18 07:36:37
  • 1115
Expected BehaviorWith WebFlux, mockUser() must have effect if a controller method is annotated with @PreAuthorize. It ha...

Spring Security Reactive Security: Controller method annotated with @PreAuthorize should be considered in test

  • 2025-01-18 07:36:35
  • 1197
Expected BehaviorWith WebFlux, mockUser() must have effect if a controller method is annotated with @PreAuthorize. It ha...

Spring Security Spring Security SAML fails in Chrome because of favicon request

  • 2025-01-18 07:36:32
  • 1546
Describe the bugI created a simple example with Spring Boot 3 + SAML. In doing so, I discovered that authentication with...

Spring Security Provide a default ReactiveOAuth2AuthorizedClientManager @Bean

  • 2025-01-18 07:36:27
  • 11933
When using org.springframework.security:spring-security-oauth2-client (or org.springframework.boot:spring-boot-starter-o...

Spring Security Getting 401 Error on /userinfo endpoint call

  • 2025-01-18 07:36:23
  • 3145
SummaryI have setup the Spring security authorization server which has a client registered in its registry. I have confi...

Spring Security ReactiveOAuth2AuthorizedClientManager.authorize called twice for each WebClient request with ServerOAuth2AuthorizedClientExchangeFilterFunction using client registration id

  • 2025-01-18 07:36:21
  • 5238
I'm using 5.7.2 via Spring Boot security starters.ReactiveOAuth2AuthorizedClientManager.authorize is called twice for ea...

Spring Security Remove FilterSecurityInterceptor from WebSecurity

  • 2025-01-18 07:36:18
  • 1021
FilterSecurityInterceptor will be deprecated in 5.8 in favor of the new AuthorizationFilter.This is part of the work of ...

Spring Security Receive AuthnRequest Id and Response InResponseTo in Saml2AuthenticationRequestRepository

  • 2025-01-18 07:36:15
  • 2739
Expected BehaviorThe ability to have access to AuthnRequest Id and Response InResponseTo when saving and loading Abstrac...

Spring Security Document OAuth2 Client behind proxy and redirect_uri

  • 2025-01-18 07:36:12
  • 1293
Hi, it would be nice to have mentioned in documentation that forward headers has to be used when app is behind proxy ser...

Spring Security Add BigDecimal type into SecurityJackson2Modules as allowed class

  • 2025-01-18 07:36:10
  • 4000
Expected BehaviorAdd BigDecimal type into SecurityJackson2Modules as allowed classCurrent BehaviorIt needs to add mixins...

Spring Security Update javadoc of HttpSecurity, WebSecurityConfiguration and WebSecurity to reflect deprecation of WebSecurityConfigurerAdapter

  • 2025-01-18 07:36:04
  • 820
WebSecurityConfigurerAdapter has been deprecated in Spring Security 5.7 but the javadoc of the following classes still e...

Spring Security Update javadoc of EnableWebSecurity to reflect deprecation of WebSecurityConfigurerAdapter

  • 2025-01-18 07:36:02
  • 2498
WebSecurityConfigurerAdapter has been deprecated in Spring Security 5.7 but the javadoc of EnableWebSecurity still encou...

Spring Security Improve Speed of CI Runs

  • 2025-01-18 07:36:00
  • 335
Our current CI build takes quite a bit of time. We should see if there are ways to improve it. For example, right now th...

Spring Security Use Spring Gradle Build Action

  • 2025-01-18 07:35:57
  • 799
We should switch from gradle/gradle-build-action@v2 to spring-io/spring-gradle-build-action@v1 (see README).Replace the ...

Spring Security Add hash-based Content-Security-Policy for SAML post pages

  • 2025-01-18 07:35:50
  • 283
Inline scripts of SAML pages for post binding does not work if CSP is active.Therefore the page should include a hash of...

Spring Security Warn users that WebTestClient with MockMvc is not supported

  • 2025-01-18 07:35:48
  • 410
WebTestClient + MockMvc is not currently supported. If possible, we should warn users with an IllegalStateException that...

Spring Security WebTestClient authentication fails with form-data credentials

  • 2025-01-18 07:35:45
  • 6573
spring-boot-2.6.3I'm migrating my MockMvc tests to WebTestClient, for having all my tests using the same underlying API....

Spring Security Mutators throw NullPointerException when used with MockMvc setup

  • 2025-01-18 07:35:42
  • 2394
When MockMvc is used to set up a WebTestClient, applying a mutator such as csrf() fails with a NullPointerException, but...
上一页 下一页
.