Describe the bugThis is kind of a follow up to https://github.com/spring-projects/spring-security/issues/8407. I just fo...

Expected BehaviorAfter adding ".cacheControl()" there should be an option to override header write decider.Current Behav...

Describe the bugI am using the AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager with a PasswordReactiveOAuth...

Expected BehaviorThere exists an implementation of AuthenticationFailureHandler which returns an HTTP status code of 401...

Describe the bugI made an application with Spring Security OAuth Client for WebClient to make it easier to obtain a toke...

Expected BehaviorFormLoginConfigurer could have a method to call AbstractAuthenticationConvigurer#setAuthenticationFilte...

Expected BehaviorHello,This is kind of a follow up to #10018. While trying to upgrade to spring security 5.5.1, I found ...

Expected BehaviorIf I have a WebClient with OAuth2 support, based on AuthorizedClientServiceOAuth2AuthorizedClientManage...

Expected BehaviorAdd functionality to use @PostFilter on Optional return types.Current BehaviorCurrently filtering is su...

Bug descriptionWhen I run a load testing script that sends 150 requests/second for 10s targeting an endpoint that is pro...

Expected BehaviorI want to customize my authorization request in several ways for my multi-tenant application.I want to ...

Expected BehaviorYou should be able to internationalize the org.springframework.security.access.AccessDeniedException me...

Describe the bugThe Spring Security doc, section 10.21 and 12.3.26 references AuthenticationFailureEvent, but it does no...

Describe the bugThis is a follow up from #10079, as i discovered, that AclClassIdUtils is package private, wich seems a ...

The Kotlin DSL should allow setting a custom AuthenticationDetailsSource when using Form Loginhttp { formLogin { ...

The Kotlin DSL should allow setting a custom AuthenticationDetailsSource when using OAuth2 Loginhttp { oauth2Login { ...

The ApacheDSContainerTests fail on windows because the spring.keystore still has an open handle. This was discovered whe...

I'm experiencing intermittent failures when starting my Spring Boot app because the JWKS retrieval times out.I'd like to...

The desired steps to a valid Formatters registration are:First of all, the method addWebMvcConfigurers located in WebMvc...

SummaryAdd resource server support for multiple trusted JWT access token issuersActual BehaviorPresently we can configur...