Spring Security Spring Security protect routes hasRole, hasAuthority do not work with CORS request

https://asapla99.github.ioSummaryhasRole, hasAuthority do not work with http CORS request and return status 403.Actual B...

Spring Security Gracefully handle session store outage

Expected BehaviorWhen my session store is down (I'm using spring session with Redis but it should be applicable to any s...

Spring Security feign has conflict with @EnableWebFluxSecurity

SummaryAuthorization spring-cloud-gateway with spring-security(use @EnableWebFluxSecurity), and provid userInfoService b...

Spring Security Build Failure Because of Gradle Task checkstyleNohttp

Build process for my pull request:https://github.com/spring-projects/spring-security/pull/7589is failing with following ...

Spring Security invalid_redirect_uri_parameter behind reverse proxy

SummaryThis was previously raised as #6347 but it's not clear to me what the remedy is. The recommendation at the time w...

Spring Security Allow configuring oauth2ResourceServer() with custom provider

At the moment if you do not configure jwt() (or opaqueToken() on the master branch) the configurer will throw an Illegal...

Spring Security Multiple OncePerRequestFilter alongside Spring security AbstractAuthenticationProcessingFilter works locally - issue in PCF

SummaryMultiple OncePerRequestFilter alongside Spring security AbstractAuthenticationProcessingFilter works locally - is...

Spring Security Retrieving OidcIdToken from SimpleUrlLogoutSuccessHandler

SummaryBefore my final logout success redirect, I am attempting to make an additional call to a logout endpoint given by...

Spring Security Support for Plugin Point For Custom SecurityContext Implementation In Reactive Spring Security

In Non Reactive Spring Security we Have Plugin Point For custom Security Context Impl ByFollowing snippet in SecurityCon...

Spring Security NullPointerException InMemoryUserDetailsManager.updatePassword

SummaryExexuting first request to MVC based resource, getting 401.In log of service, this NPE is found:java.lang.NullPoi...

Spring Security Long Application Startup Time

SummaryWe are experiencing very long application startup times. When I enable trace logging for package org.springframe...

Spring Security Support For OAuth Login For Separate Api And UI Server

Currently OAuth Login Support Works Only When We Have API AND UI Application packaged asOne Application. What if we hava...

Spring Security Changing the Order of the Spring Security WebFilter

Changing the Order of the Spring Security WebFilterI have an API Gateway implemented using Spring Cloud Gateway that use...

Spring Security Unable to retrieve Username from ServerRequest nor ReactiveSecurityContextHolder

SummaryI recently updated a project from a pre-release of spring boot 2 to the most current 2.0.5 build. I am no longer ...

Spring Security Refactor the OAuth2AuthorizationRequestResolver so that it is not responsible for the request match.

SummaryCarefully propose changes to the specification of the OAuth2AuthorizationRequestResolver interface.I feel that th...

Spring Security Spring Security 5.0.5 not working response.sendError()

Hello!I'm using Spring Boot 2.0.2 with Spring Security. When i updated my Spring Boot for new version, i have problem wi...

Spring Security Async via CompletableFuture empties the ReactiveSecurityContextHolder

SummaryI'm trying to use graphql-java on a Reactive Spring Boot (2.0.0.RC2) codebase with Spring WebFlux (5.0.4.RELEASE)...

Spring Security In a particular case,CorsFilter config will fail

I used Kotlin for my development.First, rewrite the BasicAuthenticationFilter class, I used the JWT to check the token, ...

Spring Security spring-security 5.4.1 NimbusJwtDecoder triggering java.lang.NoSuchMethodError: com.nimbusds.jose.Header.toJSONObject()Ljava/util/Map

I'm getting java.lang.NoSuchMethodError: com.nimbusds.jose.Header.toJSONObject()Ljava/util/Map;, when using spring secur...

Spring Security Disable redirect to oauth2/authorization/{registrationId} in oauth2 flow?

Hi!Is it possible to disable redirect to oauth2/authorization/{registrationId} in oauth2 flow?I have following propertie...
上一页 下一页
.