List view

SEC-2971: Footnotes are messed up in online docs

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

type: jiraAn issue that was migrated from JIRAAn issue that was migrated from JIRA

Status: Closed (completed).

#3180 In spring-projects/spring-security;

· by spring-projects-issues was closed on Aug 29, 2019

SEC-2980: Possible race condition in SessionRegistryImpl

in: coreAn issue in spring-security-coreAn issue in spring-security-core

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

type: jiraAn issue that was migrated from JIRAAn issue that was migrated from JIRA

Status: Closed (completed).

#3189 In spring-projects/spring-security;

· by spring-projects-issues was closed on Aug 6, 2019

Misleading documentation for websocket security

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Closed (completed).

#4845 In spring-projects/spring-security;

· by tpianta was closed on Aug 14, 2019

SAML Service Provider MVP

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

Status: Closed (completed).

#6019 In spring-projects/spring-security;

· by rwinch was closed on Sep 6, 2019

Support Resource Owner Password Credentials grant

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#6003 In spring-projects/spring-security;

· by jgrandja was closed on Sep 4, 2019

Spring Boot + spring-security-oauth2-resource-server should not throw a ClassNotFoundException once it supports more than one token format

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#6209 In spring-projects/spring-security;

· by jzheaux was closed on Sep 4, 2019

Add BearerExchangeFilterFunction

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#5334 In spring-projects/spring-security;

· by rwinch was closed on Sep 3, 2019

Add Argon2PasswordEncoder

in: cryptoAn issue in spring-security-cryptoAn issue in spring-security-crypto

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#5354 In spring-projects/spring-security;

· by rwinch was closed on Aug 5, 2019

Align code in oauth2-client extensions for WebClient

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#6811 In spring-projects/spring-security;

· by jgrandja was closed on Aug 21, 2019

Fix docs typo WebSecurityConfigurationAdapter->WebSecurityConfigurerAdapter

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7026 In spring-projects/spring-security;

· by him-bhar was closed on Aug 6, 2019

v5.2.0.M3 docs contain Deprecated example code

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7062 In spring-projects/spring-security;

· by pluttrell was closed on Sep 5, 2019

Add OAuth2LoginSpec.authenticationFailureHandler

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7051 In spring-projects/spring-security;

· by dsyer was closed on Aug 5, 2019

Multipartfile request with no authentication is still consumed even after an AccessDeniedException is thrown

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7060 In spring-projects/spring-security;

· by a-sayyed was closed on Aug 15, 2019

Polish Resource Server DSL Error Messaging

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#6876 In spring-projects/spring-security;

· by jzheaux was closed on Sep 4, 2019

Jwt decoding should support multiple algorithms

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#6883 In spring-projects/spring-security;

· by rwinch was closed on Aug 20, 2019

JwtGrantedAuthoritiesConverter should allow configuring the authorities claim name

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7100 In spring-projects/spring-security;

· by jzheaux was closed on Aug 20, 2019

JwtGrantedAuthoritiesConverter should allow configuring the authority prefix

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7101 In spring-projects/spring-security;

· by jzheaux was closed on Aug 14, 2019

Allow configurable Clock in OAuth2AuthorizedClientProvider impls

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7114 In spring-projects/spring-security;

· by jgrandja was closed on Aug 23, 2019

Improve OAuth2 Resource Server tests

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#7118 In spring-projects/spring-security;

· by henriquels25 was closed on Aug 6, 2019

OAuth2 Client Credentials Flow: Getting access tokens in the service/data tier

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#6780 In spring-projects/spring-security;

· by fritzdj was closed on Sep 6, 2019

Provide Servlet equivalent of UnAuthenticatedServerOAuth2AuthorizedClientRepository

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#6683 In spring-projects/spring-security;

· by DarrenForsythe was closed on Sep 6, 2019

InMemoryReactiveClientRegistrationRepository should not use ConcurrentReferenceHashMap

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#7299 In spring-projects/spring-security;

· by jzheaux was closed on Aug 24, 2019

Fix WebClient Memory Leaks

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: backportedAn issue that has been backported to maintenance branchesAn issue that has been backported to maintenance branches

type: bugA general bugA general bug

Status: Closed (completed).

#7293 In spring-projects/spring-security;

· by rwinch was closed on Aug 21, 2019

Replace internal Stream usage with for loops

status: ideal-for-contributionAn issue that we actively are looking for someone to help us withAn issue that we actively are looking for someone to help us with

Status: Closed (completed).

#7154 In spring-projects/spring-security;

· by rwinch was closed on Sep 2, 2019

Remove internal Optional usage in favor of null checks

type: taskA general taskA general task

Status: Closed (completed).

#7155 In spring-projects/spring-security;

· by rwinch was closed on Aug 26, 2019