32 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
0
answers
35
views
How to intervene in the method security evaluation of Spring Security 6?
I am a Spring Security novice. If the question description is unprofessional and inaccurate, please help me improve it.
I want to intervene in the method security evaluation process of Spring Security ...
0
votes
1
answer
750
views
Migration from Spring Boot 2.2 to 3.2 and Java 8 to Java 21 - facing issues upgrading to Spring Authorization Server
I am currently in the process of migrating the application from Java 8 to Java 21 and Spring Boot 2.2 to Spring Boot 3.2.
I am currently facing trouble with security. My application has both an ...
0
votes
1
answer
104
views
Successfull login with authenticationManager but still 403 at any request
I'm trying to setup spring security with authorization through db and save user in security with authenticationManager.
In authorization service I'm setup GrantedAuthority and save Security User in ...
1
vote
2
answers
239
views
custom auth filter in spring-boot 3.3.2 always redirecting to "/" after auth
I am trying to create a custom authentication process that will authenticate a user based on information found in the request and create a session for them so that subsequent requests won't require ...
1
vote
2
answers
963
views
SpringBoot 3 with Spring Security 6 with Custom Filter and Custom Authentication Provider
We have recently migrated our application to SpringBoot 3.3.x with java 21. As part of this migration, we are facing some issue in making our security policies works as
I am giving outline of what we ...
0
votes
2
answers
339
views
OAuth2AuthenticatedPrincipal not loaded after introspect is executed
I have created a Spring Security 6 project with opaque token configuration implemented in resource server. I already have an authorization server deployed both to test/prod environments.
My ...
0
votes
2
answers
772
views
How to implement Persistent Token based remember me services in custom Authentication Filter Spring Security 6 / Spring Boot 3.1
I am trying to understand Spring Boot security properly.
This is the last sticking point I have and the documentation lacks a lot of detail.
All the other examples and questions are too old and not ...
3
votes
1
answer
546
views
Security Context with HttpSessionSecurityContextRepository always returns 403 after successful authentication, Spring Boot 3.3
Im revising and learning Spring Boot. With the 3.3 latest version, there are issues saving the security context in the session.
What I am trying to do is have a regular Server side stateful session ...
0
votes
1
answer
478
views
Calling any private (non-public) REST requests causes PKIX path building failed problem on Spring Security 6 (OAuth2ResourceServer)
I recently migrated to Spring Boot 3, Java 17 & Spring Security 6.
I have a working authorization server already deployed for testing and prod environments, so there is no need to implement it ...
1
vote
0
answers
68
views
How to configure 'userDetailsService' while migrating Spring Security 5.x to Spring Security 6.x
We are migrating our application from SpringBoot2.x to SpringBoot 3.x, as a result we need to migrate SpringSecurity from 5 to SpringSecurity 6.
While migrating I am facing the below error :
In the ...
0
votes
0
answers
154
views
Blank Login Page Spring Security 6.2.3 and Spring Boot 3
I am getting a blank page after hitting my custom login page URL i.e. mapped to /login. I am getting a 200 response code but showing an empty page in the browser although I my login page contains the ...
0
votes
1
answer
1k
views
Redirect to OAuth2 login page in Spring MVC with Spring Security 6
I have an Spring MVC jsf application. Each page/endpoint requests are secured with customAuthorizationManager.
I'm trying to redirect any unauthenticated/unauthorized request to our OAuth2 server's ...
1
vote
0
answers
624
views
Spring boot security 6 - swagger 3: CSRF token only worked second call
I'm implementing spring boot security in our Java 17 project which uses Swagger 3. The login procedure appears when navigating to the swagger-UI before we can call one the endpoints. Which is normal. ...
4
votes
2
answers
2k
views
Spring Boot 3 Authorization server config for token generation with TokenStore
I'm trying to create an oAuth-service using spring security in spring boot 3.2 during the integration of spring security. However, while developing, I discovered several classes that are "...
1
vote
1
answer
391
views
Problem with h2 database in spring boot 3 with spring security 6 [duplicate]
I get error:
This is because there is more than one mappable servlet in your servlet context: {org.h2.server.web.JakartaWebServlet=[/h2-console/*]
Tried everything and it doesn't work, currently have ...