The docs should reflect changes in the api of OAuth2AccessTokenResponseHttpMessageConverter related to gh-9685.OAuth2Acc...

version 2.3.12.RELEASE@Beanpublic AuthenticationManager authenticationManagerBean() throws Exception { return sup...

I created a project as an Authorization Server using spring-security-oauth2. and create other project as an Resource Ser...

I tried using WebFilter and GlobalFilter in SCG but no where it was able to check isExpired FlagAdd a webFilter ordered ...

Migrated from SEC-2872Comment From: spring-projects-issuesThis issue relates to #2624Comment From: elhussein@rwinch Can ...

Expected BehaviorSpring Security docs links that point to Spring Security Samples should point to the minor version bran...

Expected Behavioradd Person class to whitelistCurrent BehaviorCaused by: java.lang.IllegalArgumentException: The class w...

Expected BehaviorAbility to set the ServerAuthenticationSuccessHandler via the WebFlux httpBasic builder.@Beanpublic Sec...

Expected BehaviorConfigure OAuth 2.0 UserService like the following as described in Spring Security Docspackage net.jagg...

We should add an AuthorizationManager which is an imperative version of ReactiveAuthorizationManager. The class should l...

Expected BehaviorWhen a ClientAuthorizationRequiredException is thrown, a 401 response should be sent if X-Requested-Wit...

I am using Spring Boot 2.5.3 with Spring Security 5.5.1 for my web app and have setup authentication via OAuth2 with Goo...

Describe the bugI'm trying to set up an OAuth2 client against okta with private_key_jwt authentication and client_creden...

Document Jwt Client Authentication support in the reference.Issue gh-9520Comment From: sirenThank you @jgrandja for your...

Related to https://github.com/spring-projects/spring-security/issues/9174It would be nice to remember the AuthNRequest s...

The extent to which the Nimbus library is used in Nimbus(Reactive)OpaqueTokenIntrospector is minimal enough that there's...

To ensure that the sample projects stay up to date, they should be included as part of the Spring Security build.Comment...

The class org.springframework.security.config.annotation.web.configurationWebSecurityConfiguration declares a springSecu...

Similar to https://github.com/spring-projects/spring-framework/wiki/Spring-Framework-VersionsComment From: jzheauxhttps:...

Describe the bugThe issue is a Java null pointer exception resulted from checking for OpenSAML version within the SAML2 ...