Spring Security Consider renaming CommonOAuth2Provider

  • 2025-01-18 07:32:36
  • 408
We should consider renaming CommonOAuth2Provider to be more specific.The defaults provided in CommonOAuth2Provider are s...

Spring Security FilterSecurityInterceptor applies to every request by default

  • 2025-01-18 07:32:32
  • 240
The new AuthorizationFilter that supersedes the FilterSecurityInterceptor applies to every dispatcher type. We should al...

Spring Security Consider using JoseHeader and JwtClaimsSet in Jwt

  • 2025-01-18 07:32:30
  • 735
We should consider introducing public JoseHeader getJoseHeader() and public JwtClaimsSet getJwtClaimsSet() and potential...

Spring Security XSRF Cookie set twice

  • 2025-01-18 07:32:27
  • 3467
Hi,I'm still not entirely sure if it's a bug or a configuration error (but in that case, I couldn't find how to fix it i...

Spring Security Consider adding softlink from spring-security.xsd to latest schema

  • 2025-01-18 07:32:25
  • 2143
We should consider adding a relative softlink in config/src/main/resources/org/springframework/security/config so that s...

Spring Security Change task publishMavenJavaPublicationToLocalRepository to publishMavenJavaPublicationToBuildDirectoryRepository

  • 2025-01-18 07:32:18
  • 270
Local could be interpreted as ~/.m2/repository or perhaps other locations.Changing the name clarifies that it is going t...

Spring Security Update usage of deprecated reactor.util.context.Context.putAll method

  • 2025-01-18 07:32:15
  • 286
ReactorContextTestExecutionListener.DelegateTestExecutionListener.SecuritySubContext.currentContext() uses Context.putAl...

Spring Security Update DelegatingSecurityContextTaskScheduler to implement new Required Methods

  • 2025-01-18 07:32:13
  • 191
Spring Framework updated TaskScheduler to use the new Java time API https://github.com/spring-projects/spring-framework/...

Spring Security Add an option to x509 spec for configuring successHandler/failureHandler

  • 2025-01-18 07:32:11
  • 2174
Expected BehaviorWe should be able to configure the authenticationSuccessHandler and authenticationFailureHandler for x5...

Spring Security DefaultFilterChainValidator should check AuthorizationFilter

  • 2025-01-18 07:32:08
  • 177
DefaultFilterChainValidator should check for duplicate AuthorizationFilter instances as well as the common error of havi...

Spring Security Make OpenSAML Response available through authentication object

  • 2025-01-18 07:32:05
  • 2127
It would be nice to have an implementation of Saml2AuthenticatedPrincipal that includes the original Response instance. ...

Spring Security SecurityFilterChain order chain wrong under certain conditions

  • 2025-01-18 07:32:02
  • 3050
Describe the bugI'm not sure if it's a spring security or spring core bug. I've tried to do some debugging, but no idea ...

Spring Security InterceptMethodsBeanDefinitionDecorator should allow using AuthorizationManager

  • 2025-01-18 07:31:59
  • 128
Comment From: jzheauxFixed in https://github.com/spring-projects/spring-security/commit/74a007dc917243a7daad246d70f9be90...

Spring Security AbstractWebClientReactiveOAuth2AccessTokenResponseClient use WebClientCustomizer to customize the webclient rather that using a setter

  • 2025-01-18 07:31:55
  • 3497
Hi,Would it be possible for AbstractWebClientReactiveOAuth2AccessTokenResponseClient to have the WebClient instance cust...

Spring Security AnonymousAuthenticationFilter Accesses Session on Every Request

  • 2025-01-18 07:31:51
  • 2129
java.lang.RuntimeException: getSession(false) at example.SessionAccessedFilter$1.getSession(SessionAccessedFilter.jav...

Spring Security Simplify Custom Method Authorization

  • 2025-01-18 07:31:49
  • 1810
SummaryTried expanding the Spring Security framework with a new Method level annotation, however, baked in classes and p...

Spring Security ServerJwtDslTests & WebTestClientHtmlUnitDriverBuilderTests tests failing with 404 issue

  • 2025-01-18 07:31:47
  • 2418
Describe the bugRunning the Gradle build from master branch the ServerJwtDslTests & WebTestClientHtmlUnitDriverBuild...

Spring Security Official documentation for WebSecurityConfigurerAdapter is wrong

  • 2025-01-18 07:31:44
  • 1255
In the official documentation of Spring Security 6.0.0 have an deprecated example:https://docs.spring.io/spring-security...

Spring Security @AuthenticationPrincipal doesn't work when using Interface parameters.

  • 2025-01-18 07:31:40
  • 3609
Describe the bug@AuthenticationPrincipal doesn't work when using Interface parameters.To ReproduceGiven a User interface...

Spring Security ServerRequestCacheWebFilter causes WebSession to be read every request

  • 2025-01-18 07:31:36
  • 1063
SummaryCurrently the ServerRequestCacheWebFilter causes the WebSession to be read on every request. We should be able to...
上一页 下一页
.