"Alan B. Canon":https://jira.spring.io/secure/ViewProfile.jspa?name=alancanon said:In DAO-Aware subclass of RoleHierarch...

Describe the bugUnless I'm really missing something (which I won't rule out ;)), the OpenID Connect Oauth2 client will e...

Expected BehaviorJndiDnsResolver should be all I need to discover a service given the domain and service-type.Current Be...

Spring Security 5.0 introduced first-class support for OAuth 2.0, yet many aren't aware of this change or they are strug...

Related to #5446.It would be nice for BearerTokenRequestMatcher to follow suit.Comment From: jgrandja@jzheaux BearerToke...

SummaryWe should add first-class test support for the spring-security-oauth2-client module[x] #7618 - Add OIDC Login Moc...

We have a single sign on auth server that's not returning or echoing the code= parameter on the redirect url.Describe th...

Expected BehaviorIt is not posible to configure J2eePreAuthenticatedProcessingFilter further using JeeConfigurer.Simple ...

Using Spring Cloud Gateway and disabling the request cache we see different behaviour under load in our application: mor...

Update Rather than embedding spring-security-crypto, spirng-security-core should just depend on it to avoid this scenari...

Michiel Trimpe (Migrated from SEC-1629) said:Please consider adding the @WithPermission annotation which can be used to ...

Luke Taylor (Migrated from SEC-1516) said:The current approach for accessing the security context in user code involves ...

Keith Donald (Migrated from SEC-1505) said:Something like this would be nice: @RequestMapping(value="/twitter&quo...

Ido Tzang (Migrated from SEC-1515) said:I'd love to see some Radius authentication capabilities built into Spring Securi...

Luke Taylor (Migrated from SEC-1370) said:It might be possible to introduce an interface here and generic secured object...

"Martin Buechler":https://jira.spring.io/secure/ViewProfile.jspa?name=mdmd said:Acegi CAS client integration should also...

Backport of gh-9767Comment From: rwinchClosed via https://github.com/spring-projects/spring-security/commit/95132d9fe382...

"Martino Piccinato":https://jira.spring.io/secure/ViewProfile.jspa?name=martino.piccinato said:I've seen in SEC-601 you'...

http://www.kenansevindik.com/feature-interaction-problems-and-spring-security/Failed to authenticate the user as I have ...

The version selection box is missing when visiting https://projects.spring.io/spring-security/ with https, however, it's...