Spring Security Authenticatio username and password are encrypted and transmitted from the front end to the back end

Expected BehaviorHow to replace the default UsernamePasswordAuthenticationFilter。Contextspring security version: 5.1.4pr...

Spring Security Fix for 8223 breaks existing applications.

SummaryFix for https://github.com/spring-projects/spring-security/issues/8223 forces POST requests, breaking existing ap...

Spring Security Fix JDK 10 & 11 builds

SummaryDue to a Jenkins misconfiguration the build was not actually running on JDK 10 or 11. When Jenkins was fixed the ...

Spring Security AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager "principalName cannot be empty" for tokens with no subject

Describe the bugWe use AuthorizedClientServiceReactiveOAuth2AuthorizedClientManager to manage oauth tokens sent to exter...

Spring Security Switch CONTRIBUTING to adoc

Expected BehaviorWe should switch CONTRIBUTING.md to be an asciidoctor file to be consistent with the rest of our docume...

Spring Security Use Default Community Files

Expected BehaviorWe should use the default community files. See https://help.github.com/en/github/building-a-strong-comm...

Spring Security Add GitHub Issue Templates

SummaryWe already had issue templates, but we should leverage the new support for multiple issues templates. See https:/...

Spring Security Support OAuth 2.0 Authorization Server

NOTE: Please see commentThe initial support for OAuth 2.0 Authorization Server will target the following features:OAuth ...

Spring Security Overriding Spring Security Cache-Control

SummaryIt would be useful to have a declarative or simple way to override on a per controller or method basis the defaul...

Spring Security hasRole does not support SpEL

Please refer to this StackOverflow post. Expressions like @PreAuthorize(hasRole('ROLE_' + #user.role) do not work as has...

Spring Security Global ServerSecurityContextRepository ignored by logout

SummaryWhen configuring a global ServerSecurityContextRepository on the SecurityWebFilterChain, it is used by all authen...

Spring Security Enable providing a different default encoding id for the PasswordEncoderFactories#createDelegatingPasswordEncoder

SummaryIt would be good if we can pass a custom encoding id to the PasswordEncoderFactories#createDelegatingPasswordEnco...

Spring Security ClassNotFoundException: com.nimbusds.oauth2.sdk.http.HTTPResponse

Summarynimbus HTTPResponse ClassNotFound using <dependency><groupId>org.springframework.boot</groupId>...

Spring Security SAML2 HTTP-Redirect: Missing Signature and SigAlg parameters in SAMLRequest Url (AuthNRequest)

SummaryI'm currently update to Spring Security 5.2.1. and start to use the integrated SAML 2 implementation.During the i...

Spring Security Allow Samples to Run Independently

SummaryRight now samples need to be imported with Spring Security. We should allow the samples to be ran independently. ...

Spring Security Use Kotlin DSL Marker Annotations to prevent scope leaking in WebFlux DSL

SummaryThe Kotlin DSL is designed with a specific hierarchy in mind.However, the hierarchy is not enforced.The following...

Spring Security hasIpAddress in RSocket Security

SummaryI cannot see any option to check/validate IP address of client using Spring Security RSocket library. Actual Beha...

Spring Security Saml2AuthenticationRequestContext should be extendible

Implementations of Saml2AuthenticationRequestFactory may need additional context other than what Saml2AuthenticationRequ...

Spring Security Compatibility with Spring Framework 5.2.x

SummarySpringSecurity 5.3.1 documentation states that it is built against Spring Framework 5.2.5 and any newer version s...

Spring Security oauth sso does not work when it is on the same device as oauthserver

SummaryI have created an oauth2.0 authorization server using spring boot. now I want to use this authorization server to...
上一页 下一页
.