-
Notifications
You must be signed in to change notification settings - Fork 6k
Issues: spring-projects/spring-security
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
WebFirewall falsifies method not allowed responses
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#17045
opened May 6, 2025 by
reitzmichnicht
There is no way to know if a custom logout success handler has been set
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#17043
opened May 6, 2025 by
heruan
SwitchUserGrantedAuthority cannot be deserialized in Webflux
in: web
An issue in web modules (web, webmvc)
type: enhancement
A general enhancement
#17041
opened May 6, 2025 by
JohnNiang
Oauth2: Lookup from oauth2 well-known endpoint fails, if lookup of the oidc well-known endpoint errors
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#17036
opened May 4, 2025 by
lbueker
Deprecate SpringSecurityLdapTemplate
in: ldap
An issue in spring-security-ldap
type: enhancement
A general enhancement
Oauth2: docs refer to deprecated classes
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#17022
opened Apr 30, 2025 by
lbruun
Base64StringKeyGenerator should not have a minimum length
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#17012
opened Apr 29, 2025 by
OrangeDog
Cannot add security configurers during builder initialization
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#17011
opened Apr 29, 2025 by
heruan
UnsatisfiedDependencyException for OAuth2AuthorizedClientManagerRegistrar in Spring Security 6.2.8
status: feedback-provided
Feedback has been provided
#17009
opened Apr 28, 2025 by
mantu-ms
JOSE Validators claim mandatoriness option
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
HTTP interfaces implemented by Netty may bypass the Spring Security filter chain. How can permission verification be performed?
status: feedback-reminder
We've sent a reminder that we need additional information before we can continue
status: waiting-for-feedback
We need additional information before we can continue
#17000
opened Apr 26, 2025 by
haojava
Authorization + MCP Support
type: enhancement
A general enhancement
type: theme
An issue that describes a theme for a release
Consider Adding Deprecation Marker to x5t Usage
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16979
opened Apr 22, 2025 by
jzheaux
HttpsRedirectWebFilter can redirect to An issue we've not yet triaged
type: bug
A general bug
https:/
status: waiting-for-triage
#16968
opened Apr 18, 2025 by
rwinch
Duplicate pre-auth Session Id same as of already logged in user
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#16961
opened Apr 18, 2025 by
HavyakaX07
Support nested attributes for userNameAttributeName in OAuth2 UserInfo response
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16950
opened Apr 17, 2025 by
Ryokki
Issue of private_key_jwt authentication type token issuance (JwtClientAssertionAuthenticationConverter)
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#16945
opened Apr 16, 2025 by
dev-jsshin
OAuth2Login behaves differently in MVC and Reactive
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16941
opened Apr 15, 2025 by
joaquinjsb
Add support dpop customization
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
Add support one-time token value customization
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16939
opened Apr 15, 2025 by
franticticktick
Replace check calls with authorize
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16936
opened Apr 14, 2025 by
franticticktick
Support custom CAs in oauth login
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16920
opened Apr 10, 2025 by
gbaso
Reactive implementation for DPoPAuthenticationProvider & related classes
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
Previous Next
ProTip!
Type g i on any issue or pull request to go back to the issue listing page.