List view

XML namespace with saml2-login configuration fails using Java 8 and spring-security 5.8

in: configAn issue in spring-security-configAn issue in spring-security-config

type: bugA general bugA general bug

Status: Closed (completed).

#12483 In spring-projects/spring-security;

· by MichaelVetter was closed on Dec 18, 2023

X-Xss-Protection header "1; mode=block" differs in Servlet and Reactive

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Closed (completed).

#11948 In spring-projects/spring-security;

· by Kehrlann was closed on Dec 18, 2023

Duplicate annotation exception with MockMvc and method-level annotations

in: testAn issue in spring-security-testAn issue in spring-security-test

status: feedback-providedFeedback has been providedFeedback has been provided

type: bugA general bugA general bug

Status: Closed (completed).

#11436 In spring-projects/spring-security;

· by theseion was closed on Jun 5, 2024

Authentication not propagated correctly after migrating to SB3

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: bugA general bugA general bug

Status: Closed (completed).

#12877 In spring-projects/spring-security;

· by hqrd was closed on Nov 7, 2023

Documentation about configuring SecuritySocketAcceptorInterceptor in Spring Boot is confusing

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Closed (completed).

#13718 In spring-projects/spring-security;

· by aahlenst was closed on Dec 18, 2023

AnnotationConfigurationException when using PreAuthorize, CGLIB and EnableMethodSecurity

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: bugA general bugA general bug

Status: Closed (completed).

#13625 In spring-projects/spring-security;

· by rawfg was closed on Dec 9, 2023

OAuth2 Resource Server is exposing server information.

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: ideal-for-contributionAn issue that we actively are looking for someone to help us withAn issue that we actively are looking for someone to help us with

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#13730 In spring-projects/spring-security;

· by akamom was closed on Dec 11, 2023

ReactiveRemoteJWKSource caches invalid response status into jwkSetURL

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: duplicateA duplicate of another issueA duplicate of another issue

type: bugA general bugA general bug

Status: Closed (completed).

#13757 In spring-projects/spring-security;

· by dongelci was closed on Oct 19, 2023

Spring Security documentation confuses "idempotent" with "read-only" in CSRF section

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Closed (completed).

#13644 In spring-projects/spring-security;

· by matlion was closed on Nov 7, 2023

Remove <code>updateDependencies</code> plugin

in: buildAn issue in the buildAn issue in the build

type: taskA general taskA general task

Status: Closed (completed).

#13966 In spring-projects/spring-security;

· by marcusdacoregio was closed on Oct 18, 2023

relay_state should not be included in signing calculation when it is null

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: bugA general bugA general bug

Status: Closed (completed).

#13913 In spring-projects/spring-security;

· by fr2lancer was closed on Oct 19, 2023

Security configuration is failed to be initialized in a Servlet 6.0 container

in: configAn issue in spring-security-configAn issue in spring-security-config

type: bugA general bugA general bug

Status: Closed (completed).

#13794 In spring-projects/spring-security;

· by hantsy was closed on Nov 17, 2023

Document that Shibboleth Repository is Required for SAML Support

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#14286 In spring-projects/spring-security;

· by rwinch was closed on Dec 13, 2023

<code>nimbus-jose-jwt</code> must be updated when <code>oauth2-oidc-sdk</code> is updated to ensure consistency

type: taskA general taskA general task

Status: Closed (completed).

#14047 In spring-projects/spring-security;

· by marcusdacoregio was closed on Oct 25, 2023

Resolve RequestMatcher at request-time

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#14078 In spring-projects/spring-security;

· by jzheaux was closed on Nov 1, 2023

Authorization does not show up on Features section

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Closed (completed).

#14099 In spring-projects/spring-security;

· by marcusdacoregio was closed on Nov 7, 2023

References to WebFlux docs do not link to them

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Closed (completed).

#14100 In spring-projects/spring-security;

· by marcusdacoregio was closed on Nov 7, 2023

fix wrong document about "jws-algorithms"

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Closed (completed).

#14252 In spring-projects/spring-security;

· by Dieken was closed on Dec 11, 2023

Update Java Config Spring MVC documentation

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#14220 In spring-projects/spring-security;

· by jzheaux was closed on Dec 1, 2023

Improve error message when ServletRegistration API is unavailable

in: configAn issue in spring-security-configAn issue in spring-security-config

type: bugA general bugA general bug

Status: Closed (completed).

#14221 In spring-projects/spring-security;

· by jzheaux was closed on Dec 1, 2023

Fix caching error state in ReactiveRemoteJWKSource

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Closed (abandoned).

spring-projects/spring-securitynumber 13976

#13976 In spring-projects/spring-security;

· by dongelci was closed on Oct 19, 2023

Bump slackapi/slack-github-action from 1.19.0 to 1.24.0

in: buildAn issue in the buildAn issue in the build

type: taskA general taskA general task

Status: Merged (completed).

spring-projects/spring-securitynumber 14303

#14303 In spring-projects/spring-security;

· by dependabot was closed on Dec 14, 2023

Bump Gamesight/slack-workflow-status from 1.0.1 to 1.2.0

in: buildAn issue in the buildAn issue in the build

type: taskA general taskA general task

Status: Merged (completed).

spring-projects/spring-securitynumber 14301

#14301 In spring-projects/spring-security;

· by dependabot was closed on Dec 14, 2023

Bump actions/setup-java from 3 to 4

in: buildAn issue in the buildAn issue in the build

type: taskA general taskA general task

Status: Merged (completed).

spring-projects/spring-securitynumber 14307

#14307 In spring-projects/spring-security;

· by dependabot was closed on Dec 14, 2023

Bump spring-io/spring-gradle-build-action from 1 to 2

in: buildAn issue in the buildAn issue in the build

type: taskA general taskA general task

Status: Merged (completed).

spring-projects/spring-securitynumber 14308

#14308 In spring-projects/spring-security;

· by dependabot was closed on Dec 14, 2023