Spring Security When the clientRegistrations use a refreshtoken containing multiple scopes to obtain an accesstoken, the scopes getted are incorrect

Expected BehaviorIn spring-security-oauth2-client,The scope in refreshtoken is a collection of multiple ClientRegistrati...

Spring Security Browser-Based Apps with a Backend support

SummaryBrowser-Based App is JavaScript app with Spring boot backend.https://tools.ietf.org/html/draft-ietf-oauth-browser...

Spring Security webflux-x509 sample cert needs renewal

The webflux-x509 sample certificate is expired and needs renewal.Since the cert is for a sample, it might also be nice t...

Spring Security Activating CORS

SummaryI have CORS activated via spring in my dispatcher config. According to the documentation only the cors tag should...

Spring Security Excessive security metadata being stored - possible memory optimisations

Version 4.2.8The puzzling bitsI've been looking at memory usage in YourKit as we're looking to reduce the memory footpri...

Spring Security When enabling global method security, AuthenticationManager gets built twice, but only in test environment

SummaryWhen I enable global method security on an app that already subclasses WebSecurityConfigurerAdapter, the applicat...

Spring Security how to test many action in MockMvc?

hi ,i have a silly question!how to test many action in MockMvc?i make a MockMvc test in junit。eg:mvc.perform(post("/logi...

Spring Security UpdateAcl cause DeadlockLoserDataAccessException

Summarywhen deleting permession i get deadlock exception at org.springframework.jdbc.core.JdbcTemplate.query(JdbcTempla...

Spring Security A mechanism to reloading principal

What are the best practices to reload principal inside and outside (a cron application) of the application. This is a qu...

Spring Security Unable to access jersy formdata params using Spring-el

SummaryWe have an application with spring security 3.x and Jersy 1.x for REST services. As part of application security,...

Spring Security AbstractAuthenticationProcessingFilter should expose getters for all its internal state fields

SummaryI need access to the continueChainBeforeSuccessfulAuthentication field value in order to make some decision in my...

Spring Security I use spring-security-oauth2 as a client to connect UAA, but if UAA and my project have same IP address, it doesn't work. I don't know where the restrictions are?

SummaryI use UAA as oauth2 server, and use spring-security-oauth2 as client, if they deploy in different IP address , It...

Spring Security spring security in mysql 8 new keywords "groups" table name error cause bug

hi,mainly because spring security JDBC WebSecurityConfigurerAdapter .us config @Configuration @EnableWebSecurity ...

Spring Security @EnableCache doesn't work with @EnableGlobalMethodSecurity

When I mix @EnableGlobalMethodSecurity and @EnableCache, cache doesn't work at all;@Configuration@EnableGlobalMethodSecu...

Spring Security BCrypt hashing throws ArrayIndexOutOfBoundsException

SummaryWe are using Spring Security 5.0.4. (I looked at the latest code and it is the same as what we have because no ch...

Spring Security Invalid remember-me cookie cause 500 error

I'm currently using TokenBasedRememberMeServices to implement automatic login, but there's a problem that Authentication...

Spring Security Oauth controller not work with para meeter

public String index(Model model, @RegisteredOAuth2AuthorizedClient OAuth2AuthorizedClient authori...

Spring Security SpEL cannot be used on several <user> tag attributes

SummarySee this Stackoverflow question.&lt;beans:beans xmlns=&quot;http://www.springframework.org/schema/security&quot; ...

Spring Security Public Or Protected Getter For Private Fields In Classes Of Spring Security Which Are Extensible

One Of the Main Theme Of Spring And Its Various projects is:Closed For Modification and Open For ExtensionBut while work...

Spring Security Order on WebSecurityConfigurerAdapter broken between SS 4.0.3 and SS 4.2.9

SummaryAfter upgrading to SS 4.2.9 from SS 4.0.3 filters order has changed.We use many prefabricated WebSecurityConfigur...
上一页 下一页
.