玖涯软件开发|java/go/python

Spring Security spring-security-oauth2.xsd is gone

Describe the bughttp://www.springframework.org/schema/security/spring-security-oauth2.xsd is goneThis breaks startup of ...

Spring Security oauth2ResourceServer JWT revocation built-in support

Dear all,JWT revocation can be implemented manually with a publish/subscribe : a revocation event is sent (payload is th...

Spring Security It should be possible to customize authorizationRedirectStrategy in OAuth2AuthorizationRequestRedirectFilter

I need to change the authorizationRedirectStrategy in OAuth2AuthorizationRequestRedirectFilter because I want to manipul...

Spring Security FormLogin to be configurable to take in username and password as json.

Expected BehaviorFormLogin should be configurable to take in username and password as a predefined json object.Current B...

Spring Security Spring Security 5.7 xsd is not published to https://www.springframework.org/schema/security/

Summaryspring-security-5.7.xsd should be published under https://www.springframework.org/schema/security/Actual Behavior...

Spring Security Make the AbstractOAuth2AuthorizationGrantRequestEntityConverter class public

Expected BehaviorAbstractOAuth2AuthorizationGrantRequestEntityConverter is a base implementation converter to convert th...

Spring Security Improve documentation for openid package with hint on OpenID version

As we all know, the spring-security-oauth2 project is marked as deprecated. In the migration guide, the Spring team reco...

Spring Security Add ServerHttpSecurity support for PreFlightWebFitler

Similar to ServerHttpSecurity.cors() but only handles pre flight requests with the proposed PreFlightWebFilter. We may w...

Spring Security Provide a ReactiveSecurityEvaluationContextExtension via spring-security-data

Expected BehaviorAdd a ReactiveSecurityEvaluationContextExtension (similar to the existing SecurityEvaluationContextExte...

Spring Security Avoid broken links caused by htmlsingle to html5 directory name change

With thanks to @dreis2211 for bringing it to my attention, the change from htmlsingle to html5 in Spring Security 5.3 ha...

Spring Security Strict Two way TLS enabling using CN name Validation

**Currently We can have Spring Security filters utilized in order to perform 2WayTLS with CN name validations for user a...

Spring Security Allow MethodSecurityInterceptor.publishAuthorizationSuccess to be configured

Expected BehaviorBe able to configure MethodSecurityInterceptor to publish AuthorizedEvent.I've noticed that here it is ...

Spring Security Add LdapUserSearch.searchForUser(DirContext context, String username) throws UsernameNotFoundException

We should add a default method to LdapUserSearch that supports searching for a user with the DirContext passed into it. ...

Spring Security Remember-me token is not invalidated on logout with expired or invalid session

Describe the bugThe remember-me token is not invalidated when navigating to the logout URL using a request which include...

Spring Security MethodArgumentConversionNotSupportedException in the spring-security-samples-javaconfig-form sample when a message is created or deleted

Describe the bugorg.springframework.web.method.annotation.MethodArgumentConversionNotSupportedException in the spring-se...