-
Notifications
You must be signed in to change notification settings - Fork 6.2k
Pull requests: spring-projects/spring-security
Pull requests list
Mark An issue in spring-security-core
type: enhancement
A general enhancement
GrantedAuthority#getAuthority as @Nullable
in: core
Add password4j implementation of PasswordEncoder
in: crypto
An issue in spring-security-crypto
type: enhancement
A general enhancement
Add AuthorizationManagerFactory
in: core
An issue in spring-security-core
type: enhancement
A general enhancement
Align NimbusJwtDecoder HTTP timeout defaults with Nimbus by setting to 500ms
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
status: feedback-provided
Feedback has been provided
type: enhancement
A general enhancement
Remove shouldFilterAllDispatcherTypes
in: config
An issue in spring-security-config
status: feedback-provided
Feedback has been provided
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
Add ExpressionTemplateValueProvider
in: core
An issue in spring-security-core
status: feedback-provided
Feedback has been provided
type: enhancement
A general enhancement
Allow multiple ServerLogoutHandler instances in ServerHttpSecurity
in: config
An issue in spring-security-config
status: feedback-provided
Feedback has been provided
type: enhancement
A general enhancement
Remove RelyingPartyRegistration deprecations
in: saml2
An issue in SAML2 modules
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
Remove AbstractSecurityWebSocketMessageBrokerConfigurer
in: config
An issue in spring-security-config
status: waiting-for-triage
An issue we've not yet triaged
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
Remove JwtIssuer(Reactive)AuthenticationManagerResolver deprecations
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
#17327
by ngocnhan-tran1996
was merged Jun 24, 2025
Loading...
Remove Nimbus(Reactive)OpaqueTokenIntrospector
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
Use An issue in spring-security-ldap
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
LdapName instead of DistinguishedName
in: ldap
Improve authoritiesClaimName validation in JwtGrantedAuthoritiesConverter
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
Update document regarding Stream usage
in: docs
An issue in Documentation or samples
type: enhancement
A general enhancement
Fix inconsistent constructor declaration for An issue in spring-security-config
type: bug
A general bug
ReactiveAuthorizationManagerMethodSecurityConfiguration
in: config
OAuth2Login DSL should support post-processing AuthenticationProvider implementations
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: bug
A general bug
Add option to disable anonymous authentication in Feedback has been provided
type: enhancement
A general enhancement
RSocketSecurity
in: rsocket
status: feedback-provided
Remove GET request support from Saml2AuthenticationTokenConverter
in: saml2
An issue in SAML2 modules
type: enhancement
A general enhancement
Cleanup code
in: web
An issue in web modules (web, webmvc)
type: task
A general task
#17083
by ngocnhan-tran1996
was merged May 13, 2025
Loading...
Add test and update Javadoc An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: task
A general task
CommonOAuth2Provider
in: oauth2
#17078
by ngocnhan-tran1996
was merged May 13, 2025
Loading...
Add JdbcAssertingPartyMetadataRepository
in: saml2
An issue in SAML2 modules
type: enhancement
A general enhancement
Exceptions for Authorized Objects should propagate when returned from a Controller
in: web
An issue in web modules (web, webmvc)
type: enhancement
A general enhancement
Fix the problem of not deserializing SwitchUserGrantedAuthority in Webflux
in: web
An issue in web modules (web, webmvc)
type: enhancement
A general enhancement
Add possibility to customize JwkSource of NimbusJwtDecoder
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
ProTip!
Exclude everything labeled
bug with -label:bug.