mmoussa-mapfre

Spring Boot App - Consul Discovery - Secure=true not working

2

Hello, We have migrated a spring boot app from springBootVersion = '2.3.2.RELEASE' -> '2.5.2' springCloudVersion = 'Hoxton.SR6' -> '2020.0.3' (spring-cloud-consul = 3.0.3) Our consul discovery properties have not changed but...

Set LogoutRepository on Saml2 Logout Success Handler in LogoutConfigurer

16

The `Saml2LogoutConfigurer.class` will use the configured `Saml2LogoutRequestRepository.class` and set it on the `Saml2RelyingPartyInitiatedLogoutSuccessHandler.class`. I added this change to make progress on [gh-11363](https://github.com/spring-projects/spring-security/issues/11363).

Spring Security SAML2 Logout not working with Spring Session Data MongoDB

5

**Describe the bug** Spring Security SAML2 Logout is not working with Spring Session Data MongoDB. Our setup fully works if I use in-memory sessions instead of MongoDB sessions. SP Initiated...

An anonymous user session with principal=null is created in Mongo when I enter my app. The user authenticates with Spring Security SAML2. Session fixation protection kicks in and changes the...