Top spring-security issues

OAuth2AuthorizationRequest support for some non-standard oauth provider

oauth2
okhowang picture okhowang·10 Dec 2019·17 Comments

SAML2 HTTP-Redirect: Missing Signature and SigAlg parameters in SAMLRequest Url (AuthNRequest)

saml2 enhancement
berschmoe picture berschmoe·9 Dec 2019·9 Comments

AbstractUserDetailsReactiveAuthenticationManager should use Schedulers.boundidElastic()

backported waiting-for-triage
MaxPowerDarrel picture MaxPowerDarrel·11 Oct 2019·11 Comments
👍1

OAuth2 Client Credentials Flow: Getting access tokens in the service/data tier

oauth2 enhancement
fritzdj picture fritzdj·15 Apr 2019·9 Comments

OAuth2AuthorizedClientArgumentResolver should get new access token when expired and client_credentials

oauth2 invalid
jgrandja picture jgrandja·13 Mar 2019·11 Comments
👍2

TokenRelay filter (in gateway) is getting the access_token vs. id_token when using Google OIDC

invalid
thelabdude picture thelabdude·12 Feb 2019·9 Comments

Provide Cookie implementation of AuthorizationRequestRepository

oauth2 enhancement
jgrandja picture jgrandja·8 Jan 2019·12 Comments
👍39

define the secured URLs within an application dynamically in Webflux

stackoverflow
xingfudeshi picture xingfudeshi·23 Dec 2018·3 Comments

OAuth2ResourceServerConfigurerTests should avoid MockWebServer

oauth2 test enhancement
jzheaux picture jzheaux·16 Nov 2018·11 Comments

Use String equality, not URL equality, for JWT issuer validation

duplicate
elefeint picture elefeint·15 Nov 2018·5 Comments
👍1
 Previous issues
Next issues