spring-security
spring-security copied to clipboard
spring-projects
Spring Security
**Describe the bug** When my custom GrantedAuthority returns null on `getAuthority()`, I get the following exception that makes the application fail. ``` 2024-06-13T17:44:59.000+02:00 ERROR 12657 --- [ parallel-2] a.w.r.e.AbstractErrorWebExceptionHandler :...
My current understanding (and please correct me if this incorrect) is that - an Authority is essentially an externally managed 'flag' that indicates what the user is. In the cases...
### Summary With this code: ```java @PostMapping("loginFacebook") public ClientAuth loginFacebook(@RequestBody @NotNull FacebookAuthResponse authResponse) throws FacebookException { Preconditions.checkArgument(!Strings.isNullOrEmpty(authResponse.getAccessToken()), "authResponse.accessToken must be provided"); final Facebook fb = facebookFactory.getInstance(); fb.setOAuthAccessToken(new AccessToken(authResponse.getAccessToken())); final Long...
### Summary `NimbusJwtDecoderJwkSupport` is the underlying implementation for Spring Security `JwtDecoder`. `NimbusJwtDecoderJwkSupport` provides a method to `setJwtValidator(OAuth2TokenValidator)`, but it does not have a method to retrieve the set validator(s). `NimbusJwtDecoderJwkSupport`...
…subclasses when a method in the superclass is called. closes the issue #15002
Tried this in both opera, opera incognito, and chromium (which I never use (maybe ever on this computer)). I doubt this is limited to spring security, but I'm not certain...
In 5.5, a change was made to disallow decryption unless the SAML 2.0 response is signed. Since this is a breaking change, we should have some documentation that shows how...
**Describe the bug** I have an abstract class that has the `@PreAuthorize` annotation. Its subclass also has an identical `@PreAuthorize` annotation. **To Reproduce** Attempting to invoke an endpoint in the...
There is a concurrency bug in SessionRegistryImpl where if you have multiple threads call registerNewSession concurrently with the same sessionId but different principal, sessionIds map will have one item but...
