-
Notifications
You must be signed in to change notification settings - Fork 6k
Issues: spring-projects/spring-security
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
SubjectDnX509PrincipalExtractor should update to getSubjectX500Principal
in: web
An issue in web modules (web, webmvc)
status: ideal-for-contribution
An issue that we actively are looking for someone to help us with
type: enhancement
A general enhancement
Consider Adding Deprecation Marker to x5t Usage
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16979
opened Apr 22, 2025 by
jzheaux
With Spring Security mutation on An issue we've not yet triaged
type: bug
A general bug
StrictFirewallHttpRequest should return StrictFirewallHttpRequest while it returns DefaultServerHttpRequestBuilder$MutatedServerHttpRequest in WebFilter
status: waiting-for-triage
#16978
opened Apr 22, 2025 by
siddhivinayak-sk
Additional WWW-Authenticate Response Information
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16977
opened Apr 21, 2025 by
danielshiplett
Update to io.spring.gradle:spring-security-release-plugin:1.0.5
type: dependency-upgrade
A dependency upgrade
HttpsRedirectWebFilter can redirect to An issue we've not yet triaged
type: bug
A general bug
https:/
status: waiting-for-triage
#16968
opened Apr 18, 2025 by
rwinch
Method security annotations, like An issue we've not yet triaged
type: bug
A general bug
PreAuthorize, not working on private methods after upgrade to 6.4
status: waiting-for-triage
#16967
opened Apr 18, 2025 by
betalb
Duplicate pre-auth Session Id same as of already logged in user
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#16961
opened Apr 18, 2025 by
HavyakaX07
Support nested attributes for userNameAttributeName in OAuth2 UserInfo response
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16950
opened Apr 17, 2025 by
Ryokki
X509PrincipalExtractor is missing FunctionalInterface annotation
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#16949
opened Apr 16, 2025 by
blake-bauman
IllegalArgumentException when trying to clear out all site data when logging out.
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#16948
opened Apr 16, 2025 by
ivopogace
Issue of private_key_jwt authentication type token issuance (JwtClientAssertionAuthenticationConverter)
status: waiting-for-triage
An issue we've not yet triaged
type: bug
A general bug
#16945
opened Apr 16, 2025 by
dev-jsshin
OAuth2Login behaves differently in MVC and Reactive
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16941
opened Apr 15, 2025 by
joaquinjsb
Add support dpop customization
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
Add support one-time token value customization
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16939
opened Apr 15, 2025 by
franticticktick
Replace check calls with authorize
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16936
opened Apr 14, 2025 by
franticticktick
Support custom CAs in oauth login
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16920
opened Apr 10, 2025 by
gbaso
Reactive implementation for DPoPAuthenticationProvider & related classes
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
Remove deprecated implementations of OAuth2AccessTokenResponseClient
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
Support RFC 9493 ("sub_id" claim)
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16907
opened Apr 8, 2025 by
OrangeDog
Support for JWT claims from RFC 9068
status: waiting-for-triage
An issue we've not yet triaged
type: enhancement
A general enhancement
#16906
opened Apr 8, 2025 by
OrangeDog
Align Metadata Annotation Support with Spring Framework 7
type: enhancement
A general enhancement
type: theme
An issue that describes a theme for a release
Remove Usage of Spring Framework APIs marked Deprecated for Removal
type: enhancement
A general enhancement
type: theme
An issue that describes a theme for a release
Revise HttpHeaders Usage
type: bug
A general bug
type: theme
An issue that describes a theme for a release
We should remove usage of PathMatcher in web modules
type: enhancement
A general enhancement
type: theme
An issue that describes a theme for a release
Previous Next
ProTip!
Exclude everything labeled
bug with -label:bug.