玖涯软件开发|java/go/python

Spring Security OAuth2 Password Grant Type with Spring Cloud Gateway

SummaryCannot integrate Spring Cloud Gateway (which uses Spring Security 5.2) with OAuth2 Authorization Server using Res...

Spring Security Polish SAML 2.0 Login Sample

The SAML 2.0 Login sample could be improved by:Looking more like the OAuth 2.0 Login sample, for easy comparisonUsing th...

Spring Security Spring Security multiple AuthenticationProviders causing default provider configured

I have configured spring security using:@Import(SecurityProblemSupport.class)@EnableWebSecurity@Configuration@EnableGlob...

Spring Security How Active is support on stackoverflow.com

When reaching out for support regarding spring security I get refered to stackoverflow.com. However once I ask a questio...

Spring Security Nice to have: release notes linked to from this repo

SummaryIt would be useful to have release notes for Spring Security, summarizing the bug fixes and enhancements made in ...

Spring Security spring security 5.2.x resource-server BearerTokenAuthentication

If I want to access to the permitAll web api with bearer token ,but my token is invalid, I cant't access the web api. I...

Spring Security OpenSamlImplementation should not use reflection

It would be better if OpenSamlImplementation didn't use reflection.OpenSamlImplementation#buildSAMLObject(Class<?>...

Spring Security RSocket test should throw AccessDeniedException

The test retrieveFluxWhenDataFluxAndSecureThenDenied throws a MessageDeliveryException because it makes a request to a r...

Spring Security Assign sensible default for OAuth2AuthorizedClientProvider

The OAuth2AuthorizedClientManager implementations should be assigned a sensible default for the associated OAuth2Authori...

Spring Security Add OAuth2AuthorizeRequest.Builder.principal(String)

Add OAuth2AuthorizeRequest.Builder.principal(String) as a convenience method for OAuth2AuthorizeRequest.Builder.principa...

Spring Security Can't get SecurityContext using ReactiveSecurityContextHolder.getContext, as it resolves to empty.

SummaryI want to manually set Authentication to SecurityContext in a Spring Cloud Gateway application, but ReactiveSecur...

Spring Security LDAP server configuration should support port=0

It can be handy when testing to state that your ldap server should use port 0, that is, indicate that any available port...

Spring Security http://www.springframework.org/schema/security/spring-security.xsd is gone!?

As a result of #8091 !?Comment From: MikeN123This seems to break startup of all our applications. That is something we n...

Spring Security Cache token validation result

SummaryI can't find if there is a way to prevent bearer validation on each request for a short period. I would hope ther...

Spring Security WebFlux OAuth2 WebClient Authentication in grant client_credentials uses the same token from HTTP Server Request context

SummaryWebFlux OAuth2 WebClient Authentication in grant_type client_credentials uses the same token from HTTP Server Req...