List view

WebAuthenticationDetails#hashCode often returns zero

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: bugA general bugA general bug

Status: Closed (completed).

#4133 In spring-projects/spring-security;

· by murrayw24 was closed on Sep 20, 2022

Smarter HttpSession Access

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#6125 In spring-projects/spring-security;

· by rwinch was closed on Aug 18, 2022

OidcUserAuthority should not automatically include ROLE_USER authority

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

Status: Closed (completed).

#7856 In spring-projects/spring-security;

· by reda-alaoui was closed on Sep 26, 2022

Resource Server Package Name Inconsistencies

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7349 In spring-projects/spring-security;

· by jzheaux was closed on Sep 20, 2022

SAML 2.0 filters should be in the web package

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#8819 In spring-projects/spring-security;

· by jzheaux was closed on Sep 20, 2022

XSS protection should be set to 0 by default per updated OWASP recommendation

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9631 In spring-projects/spring-security;

· by candrews was closed on Oct 7, 2022

Authentication(Web)Filter should return a 500 on AuthenticationServiceExceptions

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9429 In spring-projects/spring-security;

· by jzheaux was closed on Oct 14, 2022

Upgrade Unboundid to 6.0.6

in: ldapAn issue in spring-security-ldapAn issue in spring-security-ldap

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#10210 In spring-projects/spring-security;

· by mdiskin was closed on Oct 4, 2022

BasicAuthenticationFilter skips re-authentication if username changes and Authentication object is not UsernamePasswordAuthenticationToken

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#10347 In spring-projects/spring-security;

· by pgeyman was closed on Sep 29, 2022

Remove OpenSAML3 support

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#10556 In spring-projects/spring-security;

· by marcusdacoregio was closed on Sep 20, 2022

Update Defaults for Smarter Session Access

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#11454 In spring-projects/spring-security;

· by rwinch was closed on Oct 7, 2022

Upgrade to Update to Reactor 2022.0.0-RC1

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12045 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update to Micrometer 1.10.0-RC1

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12046 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update to Spring Framework 6.0.0-RC1

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12047 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Default to DelegatingSecurityContextRepository in SecurityContextConfigurer

in: configAn issue in spring-security-configAn issue in spring-security-config

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#12049 In spring-projects/spring-security;

· by sjohnr was closed on Oct 18, 2022

Update to Spring Data 2022.0.0-RC1

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12066 In spring-projects/spring-security;

· by rwinch was closed on Oct 18, 2022

Upgrade to Update org.slf4j to 2.0.3

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12033 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update htmlunit-driver to 2.65.0

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12034 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update org.mockito to 4.8.1

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12035 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update junit-bom to 5.9.1

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12036 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update org.jetbrains.kotlin to 1.7.20

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12037 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update hibernate-core to 6.1.4.Final

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12038 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update htmlunit to 2.65.1

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12039 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update io.spring.javaformat to 0.0.35

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12040 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022

Upgrade to Update mockk to 1.13.2

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12041 In spring-projects/spring-security;

· by rwinch was closed on Oct 17, 2022