Search results

JwtDecoderFactory is missing and throws ClassNotFoundException with Bearer token and spring-boot:3.5.0

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17249 In spring-projects/spring-security;

· vanrenter opened on Jun 14, 2025

 ·  

6.5.2

Ensure ID Token is updated after refresh token (Reactive)

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Draft (not ready).

spring-projects/spring-securitynumber 17246

#17246 In spring-projects/spring-security;

· evgeniycheban opened on Jun 14, 2025

 ·  

7.0.x

Implement OAuth 2.0 Protected Resource Metadata

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17244 In spring-projects/spring-security;

· jgrandja opened on Jun 13, 2025

 ·  

7.0.x

<code>ServerOAuth2AuthorizedClientExchangeFilterFunction</code>: scope client credential tokens to the application

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17218 In spring-projects/spring-security;

· ch4mpy opened on Jun 7, 2025

Add Support DPoP Customization

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Draft (not ready).

spring-projects/spring-securitynumber 17202

#17202 In spring-projects/spring-security;

· franticticktick opened on Jun 3, 2025

 ·  

7.0.x

Support custom <code>OAuth2AuthenticatedPrincipal</code> in Jwt-based authentication flow

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 17191

#17191 In spring-projects/spring-security;

· therepanic opened on Jun 1, 2025

Ensure ID Token is updated after refresh token (Reactive)

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: duplicateA duplicate of another issueA duplicate of another issue

type: enhancementA general enhancementA general enhancement

Status: Open.

#17188 In spring-projects/spring-security;

· jgrandja opened on May 30, 2025

JwtIssuerValidator default ports not match

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17187 In spring-projects/spring-security;

· ashraf-revo opened on May 30, 2025

Make X509CertificateThumbprintValidator to be public and non-final class

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 17178

#17178 In spring-projects/spring-security;

· edmundham opened on May 28, 2025

OAuth2Login DSL should support post-processing AuthenticationProvider implementations

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open (in progress).

spring-projects/spring-securitynumber 17176

#17176 In spring-projects/spring-security;

· fkowal opened on May 27, 2025

Reactive WebClient OAuth2 SSO authentication performs too many /oauth2/token request when token expires

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17167 In spring-projects/spring-security;

· System25 opened on May 25, 2025

Document Application-Scoped Access Tokens for Reactive OAuth2 Client Applications

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17129 In spring-projects/spring-security;

· FryingHellfish opened on May 16, 2025