Expected BehaviorIn an application, we have to deal with a cookie containing the name of a store. As we are in France, t...

Michael Osipov (Migrated from SEC-3200) said:Currently the preauth chain wraps information in a User objects which defea...

Expected BehaviorWe need couple public getters for some fields of security mappings configuration and matchers:class: or...

Summarycan I use AccessDecisionManager and SecurityMetadataSource with web flux ，i want to use with spring cloud gateway...

SummaryI recently upgraded spring-security to 5.2.0.RELEASE so I could take advantage of the new LogoutSuccessEvent. Aft...

Mockk is a mocking library for Kotlin.Most of our Kotlin tests currently rely on Java Mockito to create mocks. We should...

Describe the bugI read #7719 and added a SubscribeCsrfTokenWebFilter that actively subscribe Mono<CsrfToken>.Howev...

I first created this issue in the spring boot repo https://github.com/spring-projects/spring-boot/issues/24833 but after...

When using Spring Security to filter login requests, a custom filter can be blocked using @Beans, but not with @Import. ...

Expected BehaviorMODE_INHERITABLETHREADLOCAL and DelegatingSecurityContextAsyncTaskExecutor should be properly documente...

SummaryThe CsrfConfigurer should support ignoringRegexMatchers(). Currently only Ant matcher is supported.Version4.1.xCo...

cemo koc (Migrated from SEC-2654) said:I have a couple of web modules and they are bundled together and working in embed...

Soeun Park (Migrated from SEC-2979) said:Contents from line #692 to #797 of index.adoc are missing on website(http://do...

Migrated from SEC-3000Comment From: eleftheriasClosing due to lack of details.

Jean-Pierre Bergamin (Migrated from SEC-3191) said:The AuthenticationProvider interface has the boolean supports(Class&l...

SummaryIf I have multiple authentication managers defined in the XML, one with id, one without, in 4.0 the one without a...

Manuel Jordan (Migrated from SEC-2809) said:In the 2.2.1. In-Memory Authentication section has the following code<use...

The documentation for the Oauth2 Resource Server validation (https://docs.spring.io/spring-security/site/docs/current/re...

SummaryUpdated Spring boot project from 2.1.5 RELEASE to 2.4.5 Version. It automictically updated all Spring Security de...

The expires_in parameter in an OAuth 2.0 Access Token response should be a JSON number.As per spec, in section 5.1 Succe...