Spring Security Intermittent Invalid Csrf Token Errors

  • 2025-01-18 06:30:32
  • 3171
SummaryIntermittent errors related to invalid csrf tokens when using a CsrfCookieTokenRepositoryActual BehaviorWe're see...

Spring Security Inline ResourceKeyConverterAdapter

  • 2025-01-18 06:30:29
  • 352
ResourceKeyConverterAdapter was originally created to simplify ConversionService configuration in Spring Boot applicatio...

Spring Security Generic type information provided by ResourceKeyConverterAdapter is insufficient for conversion service registration

  • 2025-01-18 06:30:27
  • 1315
Describe the bugWhen a ResourceKeyConverterAdapter is registered with the conversion service, it's registered as a Strin...

Spring Security 2.5.0 @PreAuthorize is not applied when used on a kotlin flow

  • 2025-01-18 06:30:25
  • 1369
Describe the bug@PreAuthorize is not applied when used on a kotlin Flow (while working for Flux and Mono)To Reproduce(se...

Spring Security No converter found for RSAPublicKey

  • 2025-01-18 06:30:22
  • 5028
Describe the bugorg.springframework.security.config.crypto.RsaKeyConversionServicePostProcessor does not affect the Conv...

Spring Security Make the cookie secure flag configurable in CookieServerCsrfTokenRepository

  • 2025-01-18 06:30:18
  • 758
Expected BehaviorThe CookieCsrfTokenRepository for Spring MVC applications supports configuring the secure flag for the ...

Spring Security JwtDecoders from issuer uri produces ClassCastException

  • 2025-01-18 06:30:14
  • 4706
Describe the bugUsing the latest Spring Boot snapshot version (2.5.0-SNAPSHOT) that has Spring Security 5.5.0-RC1 as dep...

Spring Security NullPointerException in StrictHttpFirewall spring-security-web version 5.4.5

  • 2025-01-18 06:30:11
  • 1135
DescriptionWhen request.getParameter(null) is called with spring-security-web 5.4.5, a NullPointerException is thrown fr...

Spring Security oauth2Login() generates authorization links for "client_credentials" grant type

  • 2025-01-18 06:30:09
  • 1959
Describe the bugIn Spring Security WebFlux, OAuth2LoginSpec#getLinks populates the returned map with authorization links...

Spring Security docs.af.pivotal.io->docs-ip.spring.io

  • 2025-01-18 06:30:06
  • 191
Backport of gh-9686Comment From: spring-projects-issuesFixed via 0a56dc4ef50edc53899499064042ca9f4f7e3971Comment From: s...

Spring Security docs.af.pivotal.io->docs-ip.spring.io

  • 2025-01-18 06:30:03
  • 150
The host for deploying the docs has changed to docs-ip.spring.ioComment From: spring-projects-issuesFixed via 4a2f493be0...

Spring Security InteractiveAuthenticationSuccessEvent does not extend from AuthenticationSuccessEvent

  • 2025-01-18 06:29:59
  • 4703
I am looking at OAuth and just realized that InteractiveAuthenticationSuccessEvent is not a subclass of AuthenticationSu...

Spring Security saml service provider: Add support to load RelyingPartyRegistration using issuer in saml response instead of registration id from request url

  • 2025-01-18 06:29:57
  • 997
SummaryWould greatly help for the Saml2AuthenticationTokenConverter to have access to the issuer of saml response so tha...

Spring Security Buffer LEAK detected by ResourceLeakDetector in AuthenticationPayloadExchangeConverter

  • 2025-01-18 06:29:53
  • 6207
Describe the bugStack trace: [ERROR] io.netty.util.ResourceLeakDetector LEAK: ByteBuf.release() was not called before it...

Spring Security Consider adding honeypot endpoints

  • 2025-01-18 06:29:49
  • 1307
A server which open to the internet might be scanned or crawled by attackersWe could trap them with honeypot endpoint li...

Spring Security 5.4.6 tag release not building with Gradle

  • 2025-01-18 06:29:46
  • 1407
I fetched a git project to look at some samples. These where located here https://github.com/spring-projects/spring-secu...

Spring Security SAML2Login in Grails without using Spring Boot

  • 2025-01-18 06:29:43
  • 1138
We have received blackduck security vulnerability for Apache Client 3.1 which is a transitive dependency of org.springfr...

Spring Security Refreshed Keycloak tokens are not saved in the session when using Spring-Session-Redis

  • 2025-01-18 06:29:40
  • 7318
Describe the bugWhen using Spring-Session-Redis and Keycloak, the token data is correctly saved to the session after log...

Spring Security Make EnableReactiveMethodSecurity compatible with Kotlin Coroutines

  • 2025-01-18 06:29:37
  • 25484
Current implementation of PrePostAdviceReactiveMethodInterceptor makes it impossible to use @Pre/PostAuthorize with susp...

Spring Security Authenticate SAML user by UserDetailService

  • 2025-01-18 06:29:34
  • 9577
Authenticating a SAML user by UserDetailsService. Like LDAP and spring saml extension doesI need to plugin my authorisat...
上一页 下一页
.