-
Notifications
You must be signed in to change notification settings - Fork 6.2k
Pull requests: spring-projects/spring-security
Pull requests list
Mark An issue in spring-security-core
type: enhancement
A general enhancement
GrantedAuthority#getAuthority as @Nullable
in: core
Allow multiple ServerLogoutHandler instances in ServerHttpSecurity
in: config
An issue in spring-security-config
status: feedback-provided
Feedback has been provided
type: enhancement
A general enhancement
Add password4j implementation of PasswordEncoder
in: crypto
An issue in spring-security-crypto
type: enhancement
A general enhancement
Add AuthorizationManagerFactory
in: core
An issue in spring-security-core
type: enhancement
A general enhancement
Align NimbusJwtDecoder HTTP timeout defaults with Nimbus by setting to 500ms
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
status: feedback-provided
Feedback has been provided
type: enhancement
A general enhancement
Add option to disable anonymous authentication in Feedback has been provided
type: enhancement
A general enhancement
RSocketSecurity
in: rsocket
status: feedback-provided
Improve authoritiesClaimName validation in JwtGrantedAuthoritiesConverter
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
Add ExpressionTemplateValueProvider
in: core
An issue in spring-security-core
status: feedback-provided
Feedback has been provided
type: enhancement
A general enhancement
Remove shouldFilterAllDispatcherTypes
in: config
An issue in spring-security-config
status: feedback-provided
Feedback has been provided
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
Use An issue in spring-security-ldap
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
LdapName instead of DistinguishedName
in: ldap
Remove Nimbus(Reactive)OpaqueTokenIntrospector
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
Remove RelyingPartyRegistration deprecations
in: saml2
An issue in SAML2 modules
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
Remove JwtIssuer(Reactive)AuthenticationManagerResolver deprecations
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
#17327
by ngocnhan-tran1996
was merged Jun 24, 2025
Loading...
updated Jun 25, 2025
Remove AbstractSecurityWebSocketMessageBrokerConfigurer
in: config
An issue in spring-security-config
status: waiting-for-triage
An issue we've not yet triaged
type: breaks-passivity
A change that breaks passivity with the previous release
type: enhancement
A general enhancement
Update document regarding Stream usage
in: docs
An issue in Documentation or samples
type: enhancement
A general enhancement
OAuth2Login DSL should support post-processing AuthenticationProvider implementations
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: bug
A general bug
NimbusJwtEncoder should simplify constructing with javax.security Keys
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
Send saml logout response even when validation errors happen
in: saml2
An issue in SAML2 modules
type: enhancement
A general enhancement
Replace deprecated #check calls with #authorize
in: core
An issue in spring-security-core
type: enhancement
A general enhancement
Add JdbcAssertingPartyMetadataRepository
in: saml2
An issue in SAML2 modules
type: enhancement
A general enhancement
Fix inconsistent constructor declaration for An issue in spring-security-config
type: bug
A general bug
ReactiveAuthorizationManagerMethodSecurityConfiguration
in: config
Add BearerTokenAuthenticationConverter
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
Remove GET request support from Saml2AuthenticationTokenConverter
in: saml2
An issue in SAML2 modules
type: enhancement
A general enhancement
Include UsernameNotFoundException in BadCredentialsException
in: core
An issue in spring-security-core
type: enhancement
A general enhancement
ProTip!
no:milestone will show everything without a milestone.