spring-security icon indicating copy to clipboard operation
spring-security copied to clipboard

Spring Security

Results 621 spring-security issues
Sort by recently updated
recently updated
newest added

See gh-15971

type: task

We should consider removing PortResolver as it leads to confusion is likely no longer necessary. See gh-8140 gh-12971

in: web
type: enhancement

reviewer: @rwinch ## Description Use `DefaultResourcesFilter` with a proper static method for webauthn pages. Note that the filter used to be registered only when the `DefaultLoginPageGeneratingFilter` was registered. It is...

status: waiting-for-triage

reviewer: @rwinch ## Overview Add end-to-end tests for the webauthn registration and login, using Selenium + Chrome driver. Chrome is the only browser supporting virtual authenticators as of today. ##...

status: waiting-for-triage

### Summary https://www.w3.org/TR/webauthn Work on this was started in gh-6842 but [stalled](https://github.com/spring-projects/spring-security/pull/6842#issuecomment-630373926). The work is still in https://github.com/rwinch/spring-security-webauthn

in: web
type: enhancement
theme: mfa

Revert https://github.com/spring-projects/spring-security/commit/d5a0fa91344bb7e61e5d292e905cd43df1e9a914

type: task

Do you have plans to support spring-security-cas use in webflux? I have use webflux in netty container

in: cas
status: blocked

**Describe the bug** A clear and concise description of what the bug is. First of all. i made the code about SSE Without Spring Security . at that time, SSE...

status: waiting-for-triage
type: bug

**Getting following connection error with AWS Elasticache (production)** 2024-10-19T08:33:26.374Z INFO 1 --- [BFFApplication] [xecutorLoop-3-4] f.b.a.r.s.RedisSecurityContextRepository : SAVING AUTHORIZATION REQUEST 2024-10-19T08:33:26.379Z INFO 1 --- [BFFApplication] [xecutorLoop-3-4] f.b.a.r.s.RedisSecurityContextRepository : Saved Authorization Request...

status: waiting-for-triage
type: bug

I have a legacy OAuth2 API I need to use, and it requires the use of a password grant. Support for password grants was removed in `AbstractRestClientOAuth2AccessTokenResponseClient` so when I...

status: waiting-for-triage
type: enhancement