List view

Additional client_id field added in POST body for private_key_jwt authentication method for client credential grant type

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: duplicateA duplicate of another issueA duplicate of another issue

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#11298 In spring-projects/spring-security;

· by mit2222 was closed on Oct 2, 2024

Allow OAuth2ClientSpec to get ReactiveOAuth2AccessTokenResponseClient from Spring IoC

in: configAn issue in spring-security-configAn issue in spring-security-config

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#11097 In spring-projects/spring-security;

· by NotFound403 was closed on Sep 23, 2024

Add Support for Passkeys

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

theme: mfaRelated to multi-factor authentication, & building blocks for MFA (such as WebAuthN & passkeys)Related to multi-factor authentication, & building blocks for MFA (such as WebAuthN & passkeys)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#13305 In spring-projects/spring-security;

· by asaikali was closed on Oct 21, 2024

Document RestClient integration

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15894 In spring-projects/spring-security;

· by sjohnr was closed on Oct 18, 2024

Replace Date().getTime() with System.currentTimeMillis()

in: coreAn issue in spring-security-coreAn issue in spring-security-core

status: duplicateA duplicate of another issueA duplicate of another issue

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15889 In spring-projects/spring-security;

· by openrefactorymunawar was closed on Oct 10, 2024

Restore Framework version on Snapshot build

in: coreAn issue in spring-security-coreAn issue in spring-security-core

status: blockedAn issue that's blocked on an external project changeAn issue that's blocked on an external project change

type: bugA general bugA general bug

Status: Closed (completed).

#15916 In spring-projects/spring-security;

· by jzheaux was closed on Oct 21, 2024

AuthorizationEventPublisher should accept an AuthorizationResult

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15915 In spring-projects/spring-security;

· by jzheaux was closed on Oct 14, 2024

Release 6.4.0-RC1

type: taskA general taskA general task

Status: Closed (completed).

#15966 In spring-projects/spring-security;

· by rwinch was closed on Oct 21, 2024

Document RestClient-based implementations

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15938 In spring-projects/spring-security;

· by sjohnr was closed on Oct 18, 2024

Parameters customizer called before all parameters are set

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15939 In spring-projects/spring-security;

· by sjohnr was closed on Oct 18, 2024

Document setting up <code>client_credentials</code> with access tokens scoped to the application

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15304 In spring-projects/spring-security;

· by sjohnr was closed on Oct 18, 2024

Support refresh token for Token Exchange

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15534 In spring-projects/spring-security;

· by icruces was closed on Sep 27, 2024

Allow customizing the strategy for resolving the principal in <code>OAuth2ClientHttpRequestInterceptor</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: duplicateA duplicate of another issueA duplicate of another issue

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15826 In spring-projects/spring-security;

· by sjohnr was closed on Sep 27, 2024

Support One-Time Tokens in a Clustered Environment

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15735 In spring-projects/spring-security;

· by franticticktick was closed on Oct 2, 2024

The additionalParameters array parameter of OAuth2AuthorizationRequest causes the authorizationRequestUri to be incorrect

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#15830 In spring-projects/spring-security;

· by sjohnr was closed on Sep 19, 2024

Make Security Observations Selectable

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15678 In spring-projects/spring-security;

· by jzheaux was closed on Sep 26, 2024

Add API for Looking Up Security Annotations

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15700 In spring-projects/spring-security;

· by mauromol was closed on Sep 18, 2024

Improve readibility of empty collection checks

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 15898

#15898 In spring-projects/spring-security;

· by kwonyonghyun was closed on Oct 14, 2024

Bump @antora/collector-extension from 1.0.0-beta.2 to 1.0.0-beta.3 in /docs

in: buildAn issue in the buildAn issue in the build

type: taskA general taskA general task

Status: Merged (completed).

spring-projects/spring-securitynumber 15911

#15911 In spring-projects/spring-security;

· by dependabot was closed on Oct 14, 2024

Bump ch.qos.logback:logback-classic from 1.5.9 to 1.5.10

status: duplicateA duplicate of another issueA duplicate of another issue

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 15912

#15912 In spring-projects/spring-security;

· by dependabot was closed on Oct 14, 2024

Bump ch.qos.logback:logback-classic from 1.5.8 to 1.5.9

status: duplicateA duplicate of another issueA duplicate of another issue

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 15892

#15892 In spring-projects/spring-security;

· by dependabot was closed on Oct 9, 2024

Bump io.projectreactor:reactor-bom from 2023.0.10 to 2023.0.11

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 15922

#15922 In spring-projects/spring-security;

· by dependabot was closed on Oct 16, 2024

Bump org.mockito:mockito-bom from 5.14.1 to 5.14.2

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 15923

#15923 In spring-projects/spring-security;

· by dependabot was closed on Oct 16, 2024

Bump ch.qos.logback:logback-classic from 1.5.10 to 1.5.11

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 15924

#15924 In spring-projects/spring-security;

· by dependabot was closed on Oct 16, 2024

Bump org.mockito:mockito-bom from 5.14.0 to 5.14.1

status: duplicateA duplicate of another issueA duplicate of another issue

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 15869

#15869 In spring-projects/spring-security;

· by dependabot was closed on Oct 1, 2024