Describe the bugSee https://github.com/spring-projects/spring-boot/issues/27728 for background.When using the following ...

Comment From: spring-projects-issuesFixed via fafde0910f8e5f4b38f1efcd8d479031fb88103bComment From: sjohnrReverted via f...

Describe the bughttps://github.com/spring-projects/spring-security/blob/6db58cbf8a26296a15eb9f9c187176f099acaa77/config/...

Related #10263 Comment From: marcusdacoregioClosing this because when discussing with the team there is no need to make ...

Related #10361We should deprecate classes in org.springframework.security.authentication.rcp in spring-security-core sin...

Describe the bugI use Spring Boot 2.5.0 where Spring Security 5.5.0 is included.From issue https://github.com/spring-pro...

Expected BehaviorAs per RFC7521 and 7523, there is some claims that compose the Jwt that are related to the client regis...

Expected BehaviorBeing able to provide JwtAuthenticationToken only when required.Current BehaviorIn the actual requireme...

Expected BehaviorValidation of a valid SAML response should not produce a warningCurrent BehaviorValidation of a valid S...

Expected BehaviorAllow creating OIDC id token decoder outside of OidcIdTokenDecoderFactory without regrading the registr...

SummaryWe should consider using https://antora.org for creating the documentation

Update to Spring Boot 2.4.11Comment From: spring-projects-issuesFixed via 397781e57c8bfa5d0dc28bb153b04a91d0dd3ba5

Since Spring Framework moved from EhCache to JSR 107 support, we should do the sameSee:- https://github.com/spring-proje...

SummaryAdd RequestedAuthnContext with Comparison and AuthnContextClassRef to require a certain authentication from the I...

Related to https://github.com/spring-projects/spring-security/issues/10117#issuecomment-883638049ClaimAccessor#getClaimA...

Spring security architecture guide needs to be changed to reflect the simplification done to the security auto configura...

Related #10263 Add the saml2.ValidIssuers parameter into the assertionValidator and assertionSignatureValidator to preve...

Comment From: nor-ek@jzheaux Hi, as I can see there is currently com.nimbusds:oauth2-oidc-sdk:9.15 in spring-security-de...

right now the app is slowed a bit by HTTP checks it has to make when the app startsup. other implementations do a lot of...

Affected Artifact: <groupId>org.springframework.security</groupId> <artifactId>spring-securi...