Spring Security Docs: WebClient OAuth2 Setup for Reactive Applications might be wrong

In the reference doc there is an example for a WebClient with OAuth2 Setup for Reactive Applications: https://docs.sprin...

Spring Security DefaultLoginPageGeneratingFilter - fix incomplete localization of the default login page

Expected BehaviorAll labels and buttons in the default login page should be localized on the basis of message.properties...

Spring Security Support extensions of WebAuthenticationDetails when using Jackson serialization

Expected BehaviorAllow custom extensions of WebAuthenticationDetails to be deserialized by Jackson.Current BehaviorThe c...

Spring Security Documentation snippets should be includes

To ensure the code snippets in our docs remain up to date, they should use tested code. Two possible sources for tested ...

Spring Security Expose JDBC default user schema DDL location as public constant

The default JDBC user schema is exposed as a classpath resource named org/springframework/security/core/userdetails/jdbc...

Spring Security Reference Documentation uses Both "multi-tenancy" and "multitenancy" through out

Documentation uses both "multi-tenancy" and "multitenancy" through outTo ReproduceRead/search the reference documentatio...

Spring Security Spring Security main build is broken on samples task

Example: https://github.com/spring-projects/spring-security/runs/5181928075?check_suite_focus=trueOur Spring Security CI...

Spring Security Saml2AuthenticationRequests not serializable cause exception when using jdbc session

SummaryError in serialization of non serializable SAML Requests prevents authentication if session is stored in database...

Spring Security SEC-2620: Make CachingUserDetailsService constructor public for easy use in Java Config

Marten Deinum (Migrated from SEC-2620) said:Trying to configure caching for anything else then the jdbcAuthentication() ...

Spring Security Tying BasicAuthenticationEntryPoint into an existing ResponseEntityExceptionHandler for auth exceptions

SummaryI'm following docs/articles for configuring a HttpSecurity (from inside my WebSecurityConfigurerAdapter#configure...

Spring Security Multiple WebSecurityConfigurationAdapter ignoring() method affects other configurations

SummaryUsing ignoring() method with multiple WebSecurityConfigurationAdapter affects both adapters.Actual BehaviorIgnori...

Spring Security Add Kotlin example for logout configuration of reactive authentication

Expected BehaviorIt should provide both of Java and Kotlin examples for a logout configuration of reactive authenticatio...

Spring Security Password encoding upgrade is insufficiently configurable

SummaryHello,I ran into https://github.com/spring-projects/spring-security/issues/8498 this week. Specifically:I upgrade...

Spring Security Consider having ContentSecurityPolicyHeaderWriter supply a script nonce

In order to have inline scripts and use a strict CSP, it's important to provide a nonce.Spring Security's ContentSecurit...

Spring Security A New TwoFactorAuthenticationFilter

Hi,I want to make it easier to implement two factor authentication (OTPs) using Spring Security. I found myself struggli...

Spring Security Replace StringUtils class of oauth2-oidc-sdk completely

Backport of https://github.com/spring-projects/spring-security/pull/10805Comment From: eleftheriasFixed via 304ef2302c4b...

Spring Security Default configurer in spring.factories is not applied when using SecurityFilterChain

When using the WebSecurityConfigurerAdapter, you can apply a configurer by default by adding it to the .META-INF/spring....

Spring Security JWKMatcher created by NimbusJwtEncoder fails to detect signing key

When a key has Digital Signature and Key Encipherment usages, NimbusJwtEncoder fails to detect a key, cause it expects i...

Spring Security web.ignoring().mvcMatchers is confuse in someway about the debug output in the console

Hello Not sure if the following is a possible bug.Having Spring Boot 2.4.1 Spring dev tools 2.4.1Spring Security 5.4.2I ...

Spring Security Proxy settings not respected by Spring security

I tried to use this dependancy in spring webflux service but getting error. Please help me is there any way to do custom...
上一页 下一页
.