spring-security issues

Adjust log message to include guidance for XML users

Closes [gh-17259](https://github.com/spring-projects/spring-security/issues/17259)

status: waiting-for-triage

Deprecation warning about authorizeRequests should also contain XML guidance

2

After upgrading Spring Security from version 6.4.4 to 6.5.0, our application consistently logs the following warning: > [DefaultFilterChainValidator.checkAuthorizationFilters:128] Usage of authorizeRequests is deprecated. Please use authorizeHttpRequests in the configuration Our...

x7Git

in: config

type: bug

status: ideal-for-contribution

Change `PasswordComparisonAuthenticator` to use `LdapClient`

2

jzheaux

Provided uncached way to use (Reactive)OidcIdTokenDecoderFactory

3

Hello. Sorry for ignoring issue creating. If ClientRegistration is managed by db, it's unreal to update jwsAlgorithm or jwksUri without restarting the app. So I added possibility not to use...

iigolovko

type: enhancement

in: oauth2

Polish

This PR includes - Add diamond operator

ngocnhan-tran1996

status: waiting-for-triage

SEC-2856: Make cookie theft detection in remember-me service configurable because it's seriously broken

13

[Jean-Pierre Bergamin](https://jira.spring.io/secure/ViewProfile.jspa?name=ractive) (Migrated from [SEC-2856](https://jira.spring.io/browse/SEC-2856?redirect=false)) said: After enabling remember-me authentication for our SSO portal, people were complaining about errors they got while logging in. Those errors turned out to be...

spring-projects-issues