Rob Winch

Use the replaced Local*Port for Boot 3.0.0-SNAPSHOT applications NOTE: There are a few samples that cannot be updated to Boot 3.0.0-SNAPSHOT yet. The authorization server does not yet build on...

OAuth Sample Do not Test Actual Configuration

6

### Summary As it stands the tests that are in Spring Security's OAuth Samples do not test the actual configuration. They are instead copying and modifying the samples to allow...

Look into alternative Embedded LDAP solutions

2

ApacheDS struggles with passivity. For example, updating to a point release should not cause non-passive changes as demonstrated in #30 Furthermore, Support has been dropped for ApacheDS 1.x, but Apache...

Add tests against Spring Data Snapshots

5

This will help us detect problems like #380 earlier

Add a SafeDeserializingSessionRepository

11

I'm not sure about the name just yet, but we should have a `SessionRepository` implementation that can ignore specific set of exceptions to allow ignoring of deserialization exceptions (i.e. when...

We should add a Converter that performs specific conversions based on the key of a Map. It would look to see if a special Converter is registered for the particular...

It would be nice if `RedisOperationsSessionRepository` had two `Converter

Allow Serialization based on session attribute name in Redis

1

This is a brain storm on how to handle https://github.com/spring-projects/spring-session/issues/348#issuecomment-181205839 For example, a `org.springframework.core.convert.converter.Converter` could be used to prior to [saving the delta](7c53558454a160e0443d73366ecc9e0d32211c3f). Then the we could provide a `org.springframework.core.convert.converter.Converter`...

Programmatically Disable CSRF for x-auth-token

2

We should provide a way for Spring Session to programmatically disable Spring Security's CSRF support on requests in which x-auth-token is used for establishing the session. We could perhaps disable...

Add the Session to a SessionContextHolder similar to SecurityContextHolder. The SessionContextHolder would store the Session in a ThreadLocal. This will allow users to access the current Session anywhere within their...