Spring Security Keycloaksession is not accessible in spring xml based project.

  • 2025-01-18 07:06:13
  • 3568
I have used spring-security adaptor for keycloack configration.spring-security- 3.2.5keycloak-4.6 jarspring-security.xml...

Spring Security OAuth: factory methods in JwtDecoders does not allow changing timeout

  • 2025-01-18 07:06:10
  • 5099
Expected BehaviorFactory methods in JwtDecoders should accept timeout values to pass into RemoteJWKSet.Current BehaviorW...

Spring Security SAML2 AuthnResponse custom type values are not mapped to Saml2AuthenticatedPrincipal

  • 2025-01-18 07:06:07
  • 5129
My current authentication is working and i get values in my DefaultSaml2AuthenticationProvider but somehow i cant find t...

Spring Security checkContentLength

  • 2025-01-18 07:06:04
  • 1433
https://github.com/spring-projects/spring-security/blob/dffa0ed43001d20d3f2d596db9b38d5bc06cf74e/web/src/main/java/org/s...

Spring Security Document Authorize HTTP Requests for Reactive Security

  • 2025-01-18 07:06:02
  • 1093
Similar to https://docs.spring.io/spring-security/reference/servlet/authorization/authorize-http-requests.html but for S...

Spring Security Testing section on docs is using wrong project version

  • 2025-01-18 07:05:58
  • 418
This page on the docs is using the wrong version for Spring Security. Instead of spring-security-test-5.6.2-SNAPSHOT.jar...

Spring Security NimbusReactiveJwtDecoder bean not used to pass via proxy instead of default WebClient

  • 2025-01-18 07:05:55
  • 9312
SummaryI have a NimbusReactiveJwtDecoder that is not used in OAuth2 flow to check token signature (oauth2Login).The appl...

Spring Security AbstractAuthenticationProcessingFilter inits security context too late

  • 2025-01-18 07:05:52
  • 5785
SummaryI don't understand why AbstractAuthenticationProcessingFilter is initializing SecurityContextHolder after invokin...

Spring Security Default login page's css "https://getbootstrap.com/docs/4.0/examples/signin/signin.css" is too slow in china.

  • 2025-01-18 07:05:50
  • 2211
"https://getbootstrap.com/docs/4.0/examples/signin/signin.css " always cost about 15 seconds in chinese network.Comment ...

Spring Security Getting Spring Security Reference Doc have a error

  • 2025-01-18 07:05:47
  • 444
https://docs.spring.io/spring-security/reference/getting-spring-security.html#getting-maven-bootExample 2. pom.xml<pr...

Spring Security RelyingPartyRegistrations should read all entities

  • 2025-01-18 07:05:42
  • 739
In a federated setup, a single metadata endpoint may have multiple IDP entities described.It would be nice to have addit...

Spring Security Allow custom OAuth2ErrorHttpMessageConverter with OAuth2ErrorResponseErrorHandler

  • 2025-01-18 07:05:40
  • 177
Backport of gh-10425Comment From: sjohnrClosed via 00fafd878cad4c3f8741aecb6d6603de4e30c5c4Comment From: sjohnrRemoving ...

Spring Security Support Google tokeninfo (nonstandard opaque token introspection)

  • 2025-01-18 07:05:37
  • 1580
Expected BehaviorGoogle should support standard token introspection.Current BehaviorGoogle's tokeninfo returns a nonstan...

Spring Security Custom AbstractAuthenticationFilterConfigurer Support

  • 2025-01-18 07:05:34
  • 2400
ENV- Spring Security 5.6.0- Java 8 Expected BehaviorAbstractAuthenticationFilterConfigurer config method void configure(...

Spring Security OAuth Client Credentials Authorization Broken in 5.6.x

  • 2025-01-18 07:05:32
  • 1840
OAuth Client Credentials authorization (and some other grant types) is broken in 5.6.x. It was working correctly in 5.5....

Spring Security RequestMatcherDelegatingWebInvocationPrivilegeEvaluator doesn't provided access to the ServletContext

  • 2025-01-18 07:05:29
  • 148
See #10779 Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/a041e7c9437b...

Spring Security RequestMatcherDelegatingWebInvocationPrivilegeEvaluator doesn't provided access to the ServletContext

  • 2025-01-18 07:05:26
  • 148
See #10779 Comment From: marcusdacoregioFixed via https://github.com/spring-projects/spring-security/commit/893b651aeace...

Spring Security RequestMatcherDelegatingWebInvocationPrivilegeEvaluator doesn't provided access to the ServletContext

  • 2025-01-18 07:05:24
  • 759
Describe the bugSee https://github.com/spring-projects/spring-boot/issues/29564 for details.The recently introduced Requ...

Spring Security SAML 2.0 LogoutRequest should contain session indexes

  • 2025-01-18 07:05:22
  • 4265
Expected BehaviorCurrently "LogoutRequest" is missing "SessionIndex" attributes, some IdPs might have a problem with acc...

Spring Security formLoginConfigurer DSL support Customize usernamePasswordAuthenticationFilter

  • 2025-01-18 07:05:19
  • 891
Expected Behaviorwhen use formlogin ，I need extends usernamePasswordAuthenticationFilteroverride obtainPassword method t...
上一页 下一页
.