List view

OpenSamlAuthenticationProvider should validate Response Status

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#8955 In spring-projects/spring-security;

· by fpagliar was closed on Jan 6, 2021

OAuth2ResourceServerSpecTests and OAuth2WebClientControllerTests fail

in: buildAn issue in the buildAn issue in the build

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#9421 In spring-projects/spring-security;

· by manueljordan was closed on Feb 10, 2021

Constrain Nimbus dependencies to compatible majors

in: buildAn issue in the buildAn issue in the build

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9400 In spring-projects/spring-security;

· by jzheaux was closed on Feb 3, 2021

Migrate SAML 2.0 Samples to Use PCFOne

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9362 In spring-projects/spring-security;

· by jzheaux was closed on Jan 22, 2021

Remove notEmpty check for authorities in DefaultOAuth2User

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#9366 In spring-projects/spring-security;

· by mayur9991 was closed on Feb 2, 2021

Update to Spring Boot 2.4.2

in: buildAn issue in the buildAn issue in the build

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#9443 In spring-projects/spring-security;

· by jzheaux was closed on Feb 11, 2021

Update to Kotlin 1.4.30

in: buildAn issue in the buildAn issue in the build

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#9444 In spring-projects/spring-security;

· by jzheaux was closed on Feb 11, 2021

Update to GAE 1.9.86

in: buildAn issue in the buildAn issue in the build

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#9445 In spring-projects/spring-security;

· by jzheaux was closed on Feb 11, 2021

Deprecate ClientAuthenticationMethod BASIC and POST

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9220 In spring-projects/spring-security;

· by jgrandja was closed on Nov 25, 2020

No converter found for RSAPublicKey

status: feedback-providedFeedback has been providedFeedback has been provided

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9316 In spring-projects/spring-security;

· by Sam-Kruglov was closed on Jan 21, 2021

Use Nimbus's SingleKeyJWSKeySelector

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9348 In spring-projects/spring-security;

· by jzheaux was closed on Jan 16, 2021

Customizing the metadata endpoint does not work

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#9133 In spring-projects/spring-security;

· by dawi was closed on Dec 2, 2020

Add permissionsPolicy header in HeadersConfigurers

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: ideal-for-contributionAn issue that we actively are looking for someone to help us withAn issue that we actively are looking for someone to help us with

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9262 In spring-projects/spring-security;

· by kris2kris was closed on Dec 11, 2020

Use constant time comparisons for CSRF tokens

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9291 In spring-projects/spring-security;

· by rwinch was closed on Dec 17, 2020

CsrfWebFilter creates CsrfException with incorrect message when no token is found

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#9337 In spring-projects/spring-security;

· by rwinch was closed on Jan 12, 2021

Exception when declaring multiple AuthenticationManager beans

in: configAn issue in spring-security-configAn issue in spring-security-config

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#9256 In spring-projects/spring-security;

· by ibaskine was closed on Jan 6, 2021

Wrong example name in Spring Security documentation

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#9379 In spring-projects/spring-security;

· by petroczkii was closed on Jan 28, 2021

Remove private BearerTokenAuthenticationWebFilter

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9377 In spring-projects/spring-security;

· by jzheaux was closed on Jan 26, 2021

Misleading manifestation of error condition

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9395 In spring-projects/spring-security;

· by kabennett was closed on Feb 10, 2021

Extend CorsDsl with CorsConfigurationSource property

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9314 In spring-projects/spring-security;

· by IvanPavlov1995 was closed on Jan 13, 2021

WithSecurityContextTestExecutionListener should respect NestedTestConfiguration

in: testAn issue in spring-security-testAn issue in spring-security-test

type: bugA general bugA general bug

Status: Closed (completed).

#9193 In spring-projects/spring-security;

· by rwinch was closed on Nov 6, 2020

Resource Server should identify unauthorized REST requests like HTTP Basic does

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9100 In spring-projects/spring-security;

· by jzheaux was closed on Nov 13, 2020

CookieRequestCache handles URL encoded query parameters incorrectly

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#9203 In spring-projects/spring-security;

· by mengelbrecht was closed on Nov 26, 2020

Match requests based on servlet dispatcher type

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9205 In spring-projects/spring-security;

· by eleftherias was closed on Dec 14, 2020

Return type of oauth2.core.ClaimAccessor#containsClaim(String) could be a primitive boolean

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9201 In spring-projects/spring-security;

· by grimsa was closed on Nov 25, 2020