List view

Spring Security WebFlux IP Whitelist

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7765 In spring-projects/spring-security;

· by clavinovahan was closed on Nov 30, 2021

HttpServlet3RequestFactory should set 'details' when creating the authentication token.

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9579 In spring-projects/spring-security;

· by karltinawi was closed on Dec 2, 2021

Client JwtBearer grant type should support non Jwt principal

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9812 In spring-projects/spring-security;

· by sclorng was closed on Jan 10, 2022

Add NameIdFormat support to RelyingPartyRegistration

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9115 In spring-projects/spring-security;

· by Gayathri92 was closed on Dec 1, 2021

SAML: OpenSamlMetadataResolver doesn't include NameID formats in output

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9297 In spring-projects/spring-security;

· by handcraftedbits was closed on Oct 8, 2024

Add <code>Cross-Origin-Opener-Policy</code> and <code>Cross-Origin-Embedder-Policy</code> security headers

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#9385 In spring-projects/spring-security;

· by eddumelendez was closed on Dec 7, 2021

BasicLookupStrategy for ACL defines the ObjectIdentity as not interchangable

in: aclAn issue in spring-security-aclAn issue in spring-security-acl

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#10079 In spring-projects/spring-security;

· by Ditscheridou was closed on Nov 23, 2021

Add <code>Cross-Origin-Resource-Policy</code> security header

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#10118 In spring-projects/spring-security;

· by marcusdacoregio was closed on Dec 7, 2021

clockSkew Javadoc is not consistent with implementation

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

status: ideal-for-contributionAn issue that we actively are looking for someone to help us withAn issue that we actively are looking for someone to help us with

type: bugA general bugA general bug

Status: Closed (completed).

#10174 In spring-projects/spring-security;

· by andywhite27 was closed on Nov 19, 2021

Remove reference to <code>jcenter()</code> repository

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: taskA general taskA general task

Status: Closed (completed).

#10253 In spring-projects/spring-security;

· by marcusdacoregio was closed on Nov 22, 2021

Saml2 metadata includes SingleLogoutService even if saml2 logout is disabled / not configured

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: bugA general bugA general bug

Status: Closed (completed).

#10607 In spring-projects/spring-security;

· by dvanbler was closed on Jan 3, 2022

Introduce <code>AuthorizationManagerWebInvocationPrivilegeEvaluator</code>

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#10590 In spring-projects/spring-security;

· by marcusdacoregio was closed on Dec 13, 2021

Multi-tenancy Documentation - JwtDecoder sample has multiple errors

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#10505 In spring-projects/spring-security;

· by jmax01 was closed on Dec 10, 2021

Update Spring Security to 5.7

in: buildAn issue in the buildAn issue in the build

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#10509 In spring-projects/spring-security;

· by jzheaux was closed on Nov 16, 2021

<code>AuthorityAuthorizationManager</code> incorrectly compares <code>GrantedAuthority</code>

in: coreAn issue in spring-security-coreAn issue in spring-security-core

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#10566 In spring-projects/spring-security;

· by legas1 was closed on Dec 8, 2021

Add hasIpAddress to Reactive Kotlin DSL

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#10571 In spring-projects/spring-security;

· by sjohnr was closed on Dec 2, 2021

Prevent using both <code>authorizeRequests</code> and <code>authorizeHttpRequests</code>

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#10573 In spring-projects/spring-security;

· by marcusdacoregio was closed on Dec 6, 2021

Kotlin DSL examples in reactive oauth2 docs call build twice

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#10580 In spring-projects/spring-security;

· by sjohnr was closed on Dec 6, 2021

Allow custom OAuth2ErrorHttpMessageConverter with OAuth2ErrorResponseErrorHandler

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#10425 In spring-projects/spring-security;

· by khamlaoui was closed on Nov 16, 2021

<code>WebInvocationPrivilegeEvaluator</code> Bean should support multiple <code>SecurityFilterChain</code>s

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#10554 In spring-projects/spring-security;

· by fast-reflexes was closed on Dec 13, 2021

StaticServerHttpHeadersWriter should work with case-insensitive header names

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#10557 In spring-projects/spring-security;

· by mat-mik was closed on Dec 1, 2021

Update aspectj-plugin to 6.3.0

type: backportAn issue that is a backport of another issue to a maintenance branchAn issue that is a backport of another issue to a maintenance branch

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#10514 In spring-projects/spring-security;

· by rwinch was closed on Nov 16, 2021

Update aspectj-plugin to 6.3.0

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#10492 In spring-projects/spring-security;

· by rwinch was closed on Nov 16, 2021

A null SingleLogoutServiceLocation should not cause a NullPointerException

type: bugA general bugA general bug

Status: Closed (completed).

#10674 In spring-projects/spring-security;

· by jzheaux was closed on Jan 3, 2022

Update assertj-core to 3.22.0

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#10720 In spring-projects/spring-security;

· by sjohnr was closed on Jan 14, 2022