Expected BehaviorIt should be possible to override / customize BearerTokenResolver and JwtAuthenticationProvider inside ...

ServerHttpSecurity.OAuth2ClientSpec.configure() registers OAuth2AuthorizationRequestRedirectWebFilter and OAuth2Authoriz...

Nimbus 8.18 added support for multiple algorithms to JWSVerificationKeySelector. Upgrading to this will remove Spring Se...

I'm trying to do a custom build of a Spring Cloud Dataflow which itself have dependencies to Spring Security Oauth2 pack...

Dependency convergence error for com.nimbusds:nimbus-jose-jwt:8.8 paths to dependency are:+-some.internal.package:our-se...

Backport of gh-8525Comment From: spring-projects-issuesFixed via 04453cec967b072920832fd32c2afa35446155caComment From: e...

Expected BehaviorIt should be possible to add custom params to the oauth2 token request body when using WebClientReactiv...

SummaryMaven build is failing to compile due to missing dependencies when using the spring-security-bom maven artifact. ...

Most OAuth2 client registrations use a centralized provider. For example, Facebook always has an authorization URI of ht...

Sorry problem was behind of the monitor :) 👍 Comment From: MelleDOk my mistake sorry :)Comment From: jzheauxGlad you wer...

First,thank you for design this great framework.Describe the bug@PreAuthorize("isAnonymous()") needs more config to effe...

SummaryBased on that docs it's possible to configure two authentication methods at the same Spring Instance, but for som...

SummaryI'm trying to authenticate against specific header in request.My Security config is as follows:@Configuration@Ena...

Use ObjectProvider<AuthenticationPrincipalArgumentResolver> to delay lookup of AuthenticationPrincipalArgumentReso...

Hi,as i understand PKCE in this flow code verifier and code challenge should be created on a clients front-end side (for...

Hello Teams,I'm using spring security oauth2 for single sign-on, and would like to use spring session to store oAuth2 in...

SummaryCurrently, in spring-security-oauth2-resource-server / spring-security-oauth2-jose, when an exception occurs for ...

As of Spring Boot 5.3.0, @SpringBootTest and @WebMvcTest prepare a ClientRegistrationRepository, so introducing a @MockB...

Expected BehaviorNo extra OAuth2AuthorizedClientRepository should be required for oauth2Client test support to work with...

We should allow a user to set tokenFromMultipartDataEnabled in the Kotlin DSL, just as we do in the Java DSL.The configu...