Michal Novák

Send cookie once in CookieHttpSessionStrategy

1

### Feature description In current implementation a session cookie is issued for every request for which a session exist. https://github.com/micronaut-projects/micronaut-core/blob/7de2b99be7fd0417492965639f8caa1b6f4fc3bd/session/src/main/java/io/micronaut/session/http/HttpSessionFilter.java#L154 This might be unnecessary and it potentially increases a risk...

Replaced configuration bean is not configured with configuration values

3

### Expected Behavior Consider following replacement bean: ```java @BootstrapContextCompatible @ConfigurationProperties("micronaut.ssl.key-store") @Replaces(DefaultSslConfiguration.DefaultKeyStoreConfiguration.class) class ReplacedKeyStoreConfiguration extends DefaultSslConfiguration.DefaultKeyStoreConfiguration { private static final Function DECRYPTOR = (encrypted) -> encrypted.equals("_encrypted_") ? "1234" : encrypted; @Inject...

Move Member Up/Down commands do not work in VB.NET

1

For me the command "Move Member Up/Down" does not work at all. I did not manage to make it work at all. I'm getting the "Nullable object must have value"...

Optional list query parameter defaults to list with a single element

3

### Expected Behavior Query parameter defined as `@QueryValue(value = "v", defaultValue = "") List values` should default to an empty list when parameter is not present. This was working in...

### Expected Behavior Micronaut server should not return 500 Internal Server Error in case of malformed session cookie in the request. It is incorrectly formatted request which should be categorized...

### Feature description We have an multi-tenant application. Every tenant of our application authenticates using oauth2 against a different OIDC RP. It would be nice if Micronaut security natively supported...

### Expected Behavior `DefaultReactiveOpenIdTokenResponseValidator` should not make assumptions about implementation of the injected `ReactiveJsonWebTokenValidator`. ### Actual Behaviour `DefaultReactiveOpenIdTokenResponseValidator` assumes specifc implementation of the injected `ReactiveJsonWebTokenValidator` on the following line with...

### Expected Behavior - Both successful and failed authentication events are published properly when reacitve implementation `DefaultReactiveOpenIdTokenResponseValidator` is used. - Login failed logic is invoked on authentication failures/validation errors. ###...

Discovery of a locations of the usages of an internal or experimental Micronaut APIs

1

### Feature description We get warnings on the usage an internal or experimental Micronaut API in our project during compilation. The output we get from a Gradle task is (example):...