spring-security-samples issues

Reactive OAuth2 Resource Server: Correct way to bypass authentication for a path

In non-reactive spring-security I am able to bypass authorization and authentication using "`ignoring()`" in a `WebSecurityCustomizer` https://docs.spring.io/spring-security/site/docs/current/api/org/springframework/security/config/annotation/web/configuration/WebSecurityCustomizer.html ,which is amazing, however I am not able to exploit this behaviour along...

segaura

Documentation request: Oauth2 Resource Server servicing both REST and MVC endpoints

Overview: the current examples seem to work well when configuring EITHER a REST service OR a WebMVC endpoint using the Client flow. Most applications start as a full-stack flow; then...

jackdpeterson

Update Contacts Sample from use-expressions="false"

jzheaux

enhancement

Authorities in permissions array from Auth0

Hi I have a resource server that needs to parse a permissions array in claims instead of the scope in claims: ``` "permissions": [ "create:application", "create:client_org_user"] ``` How do I...

JoeMcCaffrey

Problems with SAML2 samples

3

I'm having problems trying to run these two SAML2 samples: * https://github.com/spring-projects/spring-security-samples/tree/main/servlet/java-configuration/saml2/login * https://github.com/spring-projects/spring-security-samples/tree/main/servlet/spring-boot/java/saml2/login The Gradle command line in the READMEs doesn't work. I figured out what I think are...

onmishkin

bug

Create sample with OAuth 2.0 Client used in native app

1

We should create a sample with an OAuth 2.0 Client used in a native app. Reference: [OAuth 2.0 for Native Apps](https://datatracker.ietf.org/doc/html/rfc8252)

jgrandja