Top spring-security issues

scopes_supported metadata should not be used as default in ClientRegistrations

oauth2 bug
martin-v picture martin-v·12 May 2020·6 Comments

SEC-2664: ActiveDirectoryLdapAuthenticationProvider should wrap communication exceptions in InternalAuthenticationServiceException

ldap duplicate backport bug jira
spring-issuemaster picture spring-issuemaster·24 Apr 2020·5 Comments

Blocking in WebSessionServerCsrfTokenRepository

web backported bug
cbornet picture cbornet·17 Mar 2020·6 Comments

Clock skew to check access token expiration has wrong sign

oauth2 bug
shimikano picture shimikano·4 Oct 2019·5 Comments

OAuth2AuthorizationCodeGrantWebFilter should not restrict redirect-uri

oauth2 backported bug
jgrandja picture jgrandja·25 Jun 2019·10 Comments

Webflux Oauth2 .oauth2Client() doesn't redirect back to the original request after authenticating in the auth server

oauth2 bug
rozagerardo picture rozagerardo·29 Dec 2018·7 Comments

MethodSecurityEvaluationContext Should Check Parameter Names Are Not Null

core first-timers-only bug
rwinch picture rwinch·4 Dec 2018·10 Comments

Form-based login doesn't work in WebFlux + OAuth example

config oauth2 bug
mraible picture mraible·14 May 2018·3 Comments

SEC-2942: AuthenticationPrincipalArgumentResolver is not added by @EnableWebSecurity

config web declined bug jira
spring-issuemaster picture spring-issuemaster·23 Apr 2015·10 Comments

SEC-2510: "This object has already been built"

core invalid bug jira
spring-issuemaster picture spring-issuemaster·6 Mar 2014·10 Comments
 Previous issues
Next issues