List view

<code>OAuth2AuthorizationExchange</code> is not serializable

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14405 In spring-projects/spring-security;

· by marcusdacoregio was closed on Jan 5, 2024

Missing native-image reflection hint for CsrfTokenRequestAttributeHandler$SupplierCsrfToken

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14470 In spring-projects/spring-security;

· by marcusdacoregio was closed on Jan 17, 2024

<code>HandlerMappingIntrospectorRequestTransformer</code> is registered twice in AOT

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14367 In spring-projects/spring-security;

· by marcusdacoregio was closed on Dec 22, 2023

Missing native-image reflection hint for <code>HandlerMappingIntrospectorCachFilterFactoryBean</code>

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14377 In spring-projects/spring-security;

· by marcusdacoregio was closed on Dec 26, 2023

Application context fails to load: Couldn't find FilterChainProxy

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14380 In spring-projects/spring-security;

· by marcusdacoregio was closed on Dec 26, 2023

Configuration examples in docs are out of date

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#14392 In spring-projects/spring-security;

· by sjohnr was closed on Dec 29, 2023

X-Xss-Protection header "1; mode=block" differs in Servlet and Reactive

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14346 In spring-projects/spring-security;

· by jzheaux was closed on Dec 18, 2023

ReactiveMethodSecurityConfiguration is initialized prematurely when the context contains a BeanPostProcessor

in: configAn issue in spring-security-configAn issue in spring-security-config

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14350 In spring-projects/spring-security;

· by jzheaux was closed on Dec 18, 2023

Spring Security 6.2 defaults to InMemoryOidcSessionRegistry causing memory leaks in distributed systems with external session storage

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Closed (completed).

#14558 In spring-projects/spring-security;

· by saefty was closed on Feb 12, 2024

"Span wasn't started - an observation must be started (not only created)" (Micrometer) due to observation handling in Spring Security Web?

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14568 In spring-projects/spring-security;

· by jzheaux was closed on Feb 7, 2024

Back-Channel Logout should use localhost for internal logout request

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Closed (completed).

#14553 In spring-projects/spring-security;

· by ch4mpy was closed on Feb 13, 2024

Documentation about configuring SecuritySocketAcceptorInterceptor in Spring Boot is confusing

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14348 In spring-projects/spring-security;

· by jzheaux was closed on Dec 18, 2023

<code>WebTestUtilsTestRuntimeHints</code> should implement <code>RuntimeHintsRegistrar</code>

in: testAn issue in spring-security-testAn issue in spring-security-test

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14468 In spring-projects/spring-security;

· by marcusdacoregio was closed on Jan 17, 2024

Test using @WithMockUser fails with 401 UNAUTHORIZED with 3.2

in: testAn issue in spring-security-testAn issue in spring-security-test

type: bugA general bugA general bug

Status: Closed (completed).

#14207 In spring-projects/spring-security;

· by andrashatvani was closed on Jan 17, 2024

Unexpected Exception Handling in NimbusReactiveJwtDecoder decode Method

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14496 In spring-projects/spring-security;

· by jzheaux was closed on Jan 26, 2024

Cannot configure <code>SecurityContextRepository</code> in <code>CasAuthenticationFilter</code>

in: casAn issue in spring-security-casAn issue in spring-security-cas

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14536 In spring-projects/spring-security;

· by marcusdacoregio was closed on Feb 2, 2024

Bump Gradle Wrapper from 8.5 to 8.6

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#14547 In spring-projects/spring-security;

· by jzheaux was closed on Feb 5, 2024

SAML relying party logout filter is always ordered last

in: configAn issue in spring-security-configAn issue in spring-security-config

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14551 In spring-projects/spring-security;

· by jzheaux was closed on Feb 5, 2024

Filter order documentation appears to be inconsistent

in: configAn issue in spring-security-configAn issue in spring-security-config

status: duplicateA duplicate of another issueA duplicate of another issue

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#14565 In spring-projects/spring-security;

· by marcusdacoregio was closed on Feb 7, 2024

Bump io.micrometer:micrometer-observation from 1.12.1 to 1.12.2

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 14429

#14429 In spring-projects/spring-security;

· by dependabot was closed on Jan 12, 2024

Bump io.projectreactor:reactor-bom from 2023.0.1 to 2023.0.2

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 14430

#14430 In spring-projects/spring-security;

· by dependabot was closed on Jan 12, 2024

Bump io.mockk:mockk from 1.13.8 to 1.13.9

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 14412

#14412 In spring-projects/spring-security;

· by dependabot was closed on Jan 8, 2024

Bump org.slf4j:slf4j-api from 2.0.10 to 2.0.11

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 14422

#14422 In spring-projects/spring-security;

· by dependabot was closed on Jan 12, 2024

Bump org-aspectj from 1.9.21 to 1.9.21.1

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 14605

#14605 In spring-projects/spring-security;

· by dependabot was closed on Feb 14, 2024

Bump org.slf4j:slf4j-api from 2.0.11 to 2.0.12

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 14554

#14554 In spring-projects/spring-security;

· by dependabot was closed on Feb 6, 2024