List view

Add support dpop customization

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16940 In spring-projects/spring-security;

· franticticktick opened on Apr 15, 2025

Reactive implementation for DPoPAuthenticationProvider & related classes

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16912 In spring-projects/spring-security;

· RyanW02 opened on Apr 9, 2025

Align Metadata Annotation Support with Spring Framework 7

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16890 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

We should remove usage of PathMatcher in web modules

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16887 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Remove HandlerMappingIntrospector Usage

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: taskA general taskA general task

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16886 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Declare Spring modules with JDK 9 module metadata

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16885 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Kotlin 2.2 Upgrade

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16884 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Null safety via JSpecify

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16882 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Consider using Bouncy Castle BCrypt implementation

for: team-attentionThis ticket should be discussed as a team before proceedingThis ticket should be discussed as a team before proceeding

type: enhancementA general enhancementA general enhancement

Status: Open.

#16880 In spring-projects/spring-security;

· jgrandja opened on Apr 4, 2025

Consider changing default encoder in PasswordEncoderFactories

for: team-attentionThis ticket should be discussed as a team before proceedingThis ticket should be discussed as a team before proceeding

type: enhancementA general enhancementA general enhancement

Status: Open.

#16879 In spring-projects/spring-security;

· jgrandja opened on Apr 4, 2025

ServerCsrfTokenRequestHandler should return reactive types

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#16869 In spring-projects/spring-security;

· jzheaux opened on Apr 2, 2025

Programatic Bean Registration

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16817 In spring-projects/spring-security;

· rwinch opened on Mar 24, 2025

Declare authorization rules one at a time

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Open.

#16509 In spring-projects/spring-security;

· jzheaux opened on Jan 30, 2025

Simplify Configuring Log In using Twitter / X v2 APIs

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16378 In spring-projects/spring-security;

· rwinch opened on Jan 8, 2025

Default value for ClientRegistration redirect-uri

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16377 In spring-projects/spring-security;

· rwinch opened on Jan 8, 2025

Consider adding <code>PrincipalResolver</code> to <code>ExchangeFilterFunctions</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16284 In spring-projects/spring-security;

· sjohnr opened on Dec 13, 2024

Add @AuthorizeRequestMapping annotation

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16250 In spring-projects/spring-security;

· rwinch opened on Dec 9, 2024

Add "Best Match" based Web Authorization Rules

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16249 In spring-projects/spring-security;

· rwinch opened on Dec 9, 2024

Sample Code in Documentation Should Link to a Complete Sample

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Open.

#16227 In spring-projects/spring-security;

· rwinch opened on Dec 5, 2024

Use Include for All Samples in Documentation

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Open.

#16226 In spring-projects/spring-security;

· rwinch opened on Dec 5, 2024

Spring Security's <code>Filter</code>s and <code>WebFilter</code>s Automatically Registered by Spring Boot

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Open.

#16222 In spring-projects/spring-security;

· rwinch opened on Dec 5, 2024

Support Reactive One-Time Tokens in a Clustered Environment

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Open.

#15901 In spring-projects/spring-security;

· franticticktick opened on Oct 11, 2024

Leave Filter Chain Observations Off By Default

in: configAn issue in spring-security-configAn issue in spring-security-config

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#15858 In spring-projects/spring-security;

· jzheaux opened on Sep 26, 2024

Consider adding <code>ClientRegistrationIdResolver</code> to <code>ExchangeFilterFunction</code>s

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#15825 In spring-projects/spring-security;

· sjohnr opened on Sep 18, 2024

Consider favoring ObjectProvider#getIfAvailable

in: configAn issue in spring-security-configAn issue in spring-security-config

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#15821 In spring-projects/spring-security;

· jzheaux opened on Sep 17, 2024