Spring Security Question PreAuthorize based on stored data

Hi there.SummaryI want to perform a @PreAuthorize on a MongoRepository where the owner of the entity is stored in a fiel...

Spring Security Links to Spring Framework missing from Javadoc

Related to #7868A class that references objects in another Javadoc should link to that Javadoc. This worked in 4.2.12.RE...

Spring Security Broken Link in Documentation

This pagehttps://docs.spring.io/spring-security/site/docs/4.2.13.RELEASE/apidocs/org/springframework/security/config/ann...

Spring Security AuthorizationManagerWebInvocationPrivilegeEvaluator should grant access when AuthorizationManager abstains

Related to #10950Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/44508d...

Spring Security AuthorizationManagerWebInvocationPrivilegeEvaluator should grant access when AuthorizationManager abstains

Related to #10950Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/70b67c...

Spring Security AuthorizationManagerWebInvocationPrivilegeEvaluator should grant access when AuthorizationManager abstains

There is an inconsistency in how AuthorizationFilter and AuthorizationManagerWebInvocationPrivilegeEvaluator check if ac...

Spring Security Navigation highlighting does not match link

In the Spring Security, 5.3.1.BUILD-SNAPSHOT Reference Documentation, the (left) navigation highlighting is off by 1.I a...

Spring Security HttpSessionSecurityContextRepository saves with original response

Rather than requiring the wrapped request/response we should allow any HttpServletRequest/HttpServletResponse can be use...

Spring Security Add a "how to contribute to docs section" to the docs

A person wishing to contribute to the documentation for example adding a small section, clarifying some content has to f...

Spring Security Add Kotlin example for SecuritySocketAcceptorInterceptor of RSocket

Describe the bugAn example of Adding SecuritySocketAcceptorInterceptor bullet comes with only Java example under RSocket...

Spring Security Add SAML 2.0 Single Logout XML Support

See:- https://github.com/spring-projects/spring-security/issues/9012- https://github.com/spring-projects/spring-security...

Spring Security OAuth2AuthorizationGrantRequestEntityUtils URL encoding in secrets is causing problems with authorization

Describe the bugLooks like the util OAuth2AuthorizationGrantRequestEntityUtils is changing the client-secret when there ...

Spring Security JwtDecoder for multiple issuers

Expected BehaviorIt would be nice to have - a JwtDecoder supporting multiple token issuers- spring-boot to auto configur...

Spring Security Support customization of JwtAuthenticationConverter

This issue is related to @jzheaux as he requested some of the changes from PR #9005 to be moved to a separate ticket.On-...

Spring Security Add RequestAttributeSecurityContextRepository

As discussed with @rwinch, we can add a SecurityContextRepository implementation that stores the SecurityContext as a re...

Spring Security http.oauth2Login() & Authorization Code Grant: Access tokens are not renewed automatically using refresh token

I have a reactive app secured with OAuth2, authorization_code grant, for which I use ServerHttpSecurity - http.oauth2Lo...

Spring Security If roleHierarchyStringRepresentation of RoleHierarchyImpl.java dose not contain whitespace is not working

I don't know if you meant the ROLE separator as whitespace>whitespace ( String[] roles = line.trim().split("\\s+>\...

Spring Security WebInvocationPrivilegeEvaluator Bean should support multiple SecurityFilterChains

Related to https://github.com/spring-projects/spring-security/issues/10554Comment From: marcusdacoregioFixed via https:/...

Spring Security Add OpenSamlMetadataResolver#setEntityDescriptorCustomizer

See https://github.com/spring-projects/spring-security/pull/10614#issuecomment-1013536988Comment From: ugraveHi,i have c...

Spring Security Attributes to return on LDAP bind can only be configured with ObjectPostProcessor with Java configuration

SummaryAlthough the default search configuration for the user search on LDAP bind is supposed to return all attributes o...
上一页 下一页
.