List view

NullPointerException in StrictHttpFirewall spring-security-web version 5.4.5

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9674 In spring-projects/spring-security;

· by spring-projects-issues was closed on Apr 22, 2021

WebFlux httpBasic() should match on XHR requests

in: configAn issue in spring-security-configAn issue in spring-security-config

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9662 In spring-projects/spring-security;

· by spring-projects-issues was closed on Apr 20, 2021

HttpSecurity.addFilter* with same Filter in Different Position Places in Incorrect Location

in: configAn issue in spring-security-configAn issue in spring-security-config

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9643 In spring-projects/spring-security;

· by spring-projects-issues was closed on Apr 14, 2021

oauth2Login() generates authorization links for "client_credentials" grant type

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9637 In spring-projects/spring-security;

· by spring-projects-issues was closed on Apr 14, 2021

OAuth2ErrorResponseErrorHandler throws IllegalArgumentException for a nonstandard HTTP status code response

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9802 In spring-projects/spring-security;

· by spring-projects-issues was closed on May 25, 2021

NPE in HttpSessionSecurityContextRepository.isTransientAuthentication

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9800 In spring-projects/spring-security;

· by spring-projects-issues was closed on May 25, 2021

DefaultSpringSecurityContextSource can't handle spaces in baseDn

in: ldapAn issue in spring-security-ldapAn issue in spring-security-ldap

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9807 In spring-projects/spring-security;

· by spring-projects-issues was closed on May 26, 2021

OidcClientInitiatedLogoutSuccessHandler url-encodes PostLogoutRedirectUri twice

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: feedback-providedFeedback has been providedFeedback has been provided

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9820 In spring-projects/spring-security;

· by spring-projects-issues was closed on May 26, 2021

RSocket and WebClient with Security refCount: 0

in: rsocket

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9871 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 4, 2021

Client credentials not correctly encoded in Basic Auth

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9861 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 3, 2021

SEC-3139: Anonymous authentication token not passed to Controller

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

type: jiraAn issue that was migrated from JIRAAn issue that was migrated from JIRA

Status: Closed (completed).

#9891 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 8, 2021

Docs should state default value for Resource Server validation clock skew is 60 seconds

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9848 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 2, 2021

Buffer LEAK detected by ResourceLeakDetector in AuthenticationPayloadExchangeConverter

in: rsocket

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9681 In spring-projects/spring-security;

· by spring-projects-issues was closed on Apr 26, 2021

docs.af.pivotal.io->docs-ip.spring.io

in: buildAn issue in the buildAn issue in the build

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#9686 In spring-projects/spring-security;

· by rwinch was closed on Apr 27, 2021

Clarify quick start section in README

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9886 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 8, 2021

Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9914 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 15, 2021

Disabling logout keeps LogoutPageGeneratingWebFilter registered at /logout

in: configAn issue in spring-security-configAn issue in spring-security-config

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9942 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 17, 2021

Missing log of "caused by" exception when OP document metadata cannot be reached

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9940 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 17, 2021

Adding filters relative to custom ones is broken

in: configAn issue in spring-security-configAn issue in spring-security-config

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9908 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 14, 2021

Store one request by default in WebSessionOAuth2ServerAuthorizationRequestRepository

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9920 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 15, 2021

Using the SecurityMockServerConfigurers.java requires the com.nimbusds oauth2-oidc-sdk on the classpath

in: testAn issue in spring-security-testAn issue in spring-security-test

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: bugA general bugA general bug

Status: Closed (completed).

#9930 In spring-projects/spring-security;

· by spring-projects-issues was closed on Jun 16, 2021