Spring Security An unexpected error occurred while trying to add custom Filter to Security interception chain.

issueAn unexpected error occurred while trying to add custom Filter to Security interception chain.If I inject this cus...

Spring Security Use Spring Snapshots in Snapshot Build Again

Use Spring SNAPSHOTs again in build once https://github.com/spring-projects/spring-framework/issues/25271 is resolvedCom...

Spring Security Injecting AuthenticationPrincipal expressions as fields

Expected BehaviorIt would be nice if the following would be possible:@RestControllerpublic class Controller { @Authenti...

Spring Security Add Maximum RSocket Connections

We should allow restricting the maximum number of connections in RSocket by an identifier. Identifiers that should have ...

Spring Security spring-security-oauth2-client:5.3.2 and spring-boot-starter-test:2.3.0 clash over version of transitive dependency json-smart

Describe the bugWhen trying to run an integration test the following error occurs:java.lang.AssertionError: No value at ...

Spring Security TokenBasedRememberMeServices.makeTokenSignature never get same result when password is encoded by any of bcrypt, pbkdf2, scrypt, sha256

Describe the bugA clear and concise description of what the bug is.class: org.springframework.security.web.authenticatio...

Spring Security Overriding GlobalMethodSecurityConfiguration fails with overriding beans disabled error!

Describe the bugThe application fails when I try to override GlobalMethodSecurityConfiguration class to implement custom...

Spring Security Kotlin Configuration DSL: Add addFilterBefore() and addFilterAfter() functions

Expected BehaviorI would like to use addFilterBefore() and addFilterAfter(). Currently only the addFilterAt() function i...

Spring Security Saml 2.0 WebFlux Support

It would be nice if there were WebFlux support for SAML 2.0.This task is a placeholder for breaking down this effort.Com...

Spring Security RoleHierarchy is not used by AbstractAuthorizeTag

SummaryI've noticed a strange behaviour when setting up a RoleHierarchy in a simple Spring Boot application, when trying...

Spring Security Ease controllers unit tests in OAuth2 secured apps

SummaryI faced a few difficulties unit testing my controllers in a RESTful app secured with OAuth2 (JWT) and wrote a lib...

Spring Security Deprecate X-Frame-Options ALLOW-FROM

We should deprecate X-Frame-Options ALLOW-FROM directive. It is not longer supported by most browsers. Users should migr...

Spring Security spring-security-test: WebMvcTest: filter order

Describe the bugWebMvcTests with spring-security-test have a different filter order than during "normal" runtime.To Repr...

Spring Security DefaultOAuth2AuthorizationRequestResolver erroneously consumes POST request body

Describe the bugDefaultOAuth2AuthorizationRequestResolver consumes the request body, by calling getParameter on the requ...

Spring Security Re-enable RSocket integration tests

The RSocket integration tests are causing our build to hang, which prevents us from releasing.See gh-8531We have tempora...

Spring Security HTTP Host header attack

The class UrlUtils is using the methodgetServerName()of the HttpServletRequest.This method indeed is not secure since it...

Spring Security Login success handler should be called in proper context

Login success handler should be called in proper contextDescribe the bugIf it is called login success handler it is not ...

Spring Security BeanCurrentlyInCreationException when used spring security with spring boot 2.3.0.RELEASE and spring.main.lazy-initialization: true and management.server.port

Describe the bugI get the following error:Caused by: org.springframework.beans.factory.BeanCurrentlyInCreationException:...

Spring Security ReactorContext not available in PayloadSocketAcceptor delegate.accept

Describe the bugWhen trying to access Reactor Context from a PayloadInterceptor within the the delegate's accept method,...

Spring Security Allow WebClientReactiveClientCredentialsTokenResponseClient to be extended to customise the request body

I am using the spring security oauth client to request and cache an oauth2 token for machine to machine authentication. ...
上一页 下一页
.