List view

Move classpath checks to class member variable

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#11437 In spring-projects/spring-security;

· by marcusdacoregio was closed on Feb 7, 2023

Reenable R2dbcReactiveOAuth2AuthorizedClientServiceTests Tests

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#12339 In spring-projects/spring-security;

· by jzheaux was closed on Dec 19, 2022

Document @EnableWebFluxSecurity requiring @Configuration in 6.0.0

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#12444 In spring-projects/spring-security;

· by marcusdacoregio was closed on Dec 21, 2022

Jackson serialization of <code>DefaultSaml2AuthenticatedPrincipal</code>: <code>LinkedMultiValueMap is not in the allowlist</code>

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#12459 In spring-projects/spring-security;

· by jzheaux was closed on Dec 23, 2022

Fix CSRF protection provided by @EnableWebSocketSecurity / Stomp

in: messagingAn issue in spring-security-messagingAn issue in spring-security-messaging

type: bugA general bugA general bug

Status: Closed (completed).

#12378 In spring-projects/spring-security;

· by emopti-jrufer was closed on Jan 26, 2023

Spring Security 6.0 Migration Guide Should Mention @Configuration Meta-Annotation Removal From Configuration Annotations

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#12498 In spring-projects/spring-security;

· by jzheaux was closed on Jan 6, 2023

Spring Security 6.0.1 ObservationFilterChainDecorator produce wrong instrument names

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Closed (completed).

#12490 In spring-projects/spring-security;

· by rschlick was closed on Jan 6, 2023

SessionManagementConfigurer ignores custom SecurityContextRepository for SessionManagementFilter

in: configAn issue in spring-security-configAn issue in spring-security-config

type: bugA general bugA general bug

Status: Closed (completed).

#12579 In spring-projects/spring-security;

· by m-ibot was closed on Feb 7, 2023

SwitchUserFilter not working in Spring Security 6

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#12511 In spring-projects/spring-security;

· by marcusdacoregio was closed on Jan 10, 2023

NimbusJwtDecoder unknown KID scenario is not correctly tested

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#12495 In spring-projects/spring-security;

· by jzheaux was closed on Jan 6, 2023

@EnableReactiveMethodSecurity#useAuthorizationManager should be true

in: configAn issue in spring-security-configAn issue in spring-security-config

type: bugA general bugA general bug

Status: Closed (completed).

#12506 In spring-projects/spring-security;

· by anschnapp was closed on Jan 10, 2023

AuthorizationManager method security documentation should use AnnotationMatchingPointcut

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

status: ideal-for-contributionAn issue that we actively are looking for someone to help us withAn issue that we actively are looking for someone to help us with

type: bugA general bugA general bug

Status: Closed (completed).

#12517 In spring-projects/spring-security;

· by jzheaux was closed on Jan 10, 2023

200 response is returned when ObservationMarkingRequestRejectedHandler is in use

in: configAn issue in spring-security-configAn issue in spring-security-config

type: bugA general bugA general bug

Status: Closed (completed).

#12548 In spring-projects/spring-security;

· by philwebb was closed on Jan 26, 2023

NPE in HttpSecurity#addFilterBefore when mixing custom DSL and standard

in: configAn issue in spring-security-configAn issue in spring-security-config

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#12687 In spring-projects/spring-security;

· by jzheaux was closed on Feb 16, 2023

Security observations are not setting their parent osbervation

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: bugA general bugA general bug

Status: Closed (completed).

#12524 In spring-projects/spring-security;

· by bclozel was closed on Jan 11, 2023

Wrong name of the filter in the SecurityContextHolderFilter diagram

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#12527 In spring-projects/spring-security;

· by jzheaux was closed on Jan 11, 2023

gradlew nativeTest fails with Failed to instantiate [org.springframework.security.test.context.support.WithUserDetailsSecurityContextFactory]: No default constructor found

in: testAn issue in spring-security-testAn issue in spring-security-test

type: bugA general bugA general bug

Status: Closed (completed).

#12614 In spring-projects/spring-security;

· by naihil was closed on Feb 3, 2023

No provider found for OAuth2AuthorizationCodeAuthenticationToken when running Spring Native Reactive app using OAuth2

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Closed (completed).

#12615 In spring-projects/spring-security;

· by msosa was closed on Feb 3, 2023

javax.json.bind.Jsonb to jakarta.json.bind.Jsonb

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Closed (completed).

#12616 In spring-projects/spring-security;

· by luamas was closed on Feb 3, 2023

A typo in form login doc

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Closed (completed).

#12678 In spring-projects/spring-security;

· by binkoni was closed on Feb 17, 2023

Update jackson-bom to 2.14.2

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12696 In spring-projects/spring-security;

· by marcusdacoregio was closed on Feb 17, 2023

Update jackson-databind to 2.14.2

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12697 In spring-projects/spring-security;

· by marcusdacoregio was closed on Feb 17, 2023

Update jackson-datatype-jsr310 to 2.14.2

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12698 In spring-projects/spring-security;

· by marcusdacoregio was closed on Feb 17, 2023

Update micrometer-observation to 1.10.4

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12699 In spring-projects/spring-security;

· by marcusdacoregio was closed on Feb 17, 2023

Update mockk to 1.13.4

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#12700 In spring-projects/spring-security;

· by marcusdacoregio was closed on Feb 17, 2023