8 Pull requests opened by 7 people

• Fix logout code snippet for Kotlin

  #16341 opened Dec 25, 2024

• Fix incorrect rendering of SpEL expression example tabs

  #16343 opened Dec 25, 2024

• Fix for JdbcOneTimeTokenService cleanupExpiredTokens failing with PostgreSQL

  #16344 opened Dec 25, 2024

• Add documentation for configuring public endpoints

  #16345 opened Dec 26, 2024

• Polish WebSecurityConfiguration

  #16348 opened Dec 27, 2024

• Fix typo

  #16350 opened Dec 29, 2024

• Change deprecated FilterSecurityInterceptor to AuthorizationFilter

  #16352 opened Dec 30, 2024

• Fix missing space in documentation

  #16353 opened Dec 31, 2024

1 Issue closed by 1 person

• Method Level Security Using SpEL

  #16347 closed Dec 27, 2024

4 Issues opened by 4 people

• Spring Security WebAuthn is missing Registration by anonymous user, a use case specified in WebAuthn L2 Subsection 1.3.1

  #16351 opened Dec 30, 2024

• Allow configuration of OAuth2LoginAuthenticationFilter.authenticationResultConverter

  #16349 opened Dec 28, 2024

• Sorting RememberMeAuthenticationFilter

  #16346 opened Dec 26, 2024

• Fix Rendering of SpEL expression example Tabs in method security Documentation

  #16342 opened Dec 25, 2024

10 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Make WebAuthnAuthentication Serializable

  #16273 commented on Dec 26, 2024 • 0 new comments

• WebAuthn + Redis doesn't work; Redis defaults to JdkSerializationRedisSerializer, WebAuthn classes lack Serializable interface, WebAuthn mixins missing for GenericJackson2JsonRedisSerializer

  #16328 commented on Dec 26, 2024 • 0 new comments

• NimbusJwtEncoder should simplify constructing with javax.security Keys

  #16267 commented on Dec 27, 2024 • 0 new comments

• Bean Conflict Between `webSocketAuthorizationManagerPostProcessor` and `objectPostProcessor` in Spring Security Configuration

  #16299 commented on Dec 27, 2024 • 0 new comments

• RoleHierarchy not automatically inject in overwritten MethodSecurityExpressionHandler bean

  #16307 commented on Dec 27, 2024 • 0 new comments

• Passkey Endpoints do not Honor .permitAll()

  #16070 commented on Dec 28, 2024 • 0 new comments

• SEC-2701: DaoAuthenticationProvider shadows actual authentication exceptions

  #2924 commented on Dec 28, 2024 • 0 new comments

• [build] Settings.gradle's logic to handle different buildFile name could result in phantom subproject

  #16322 commented on Dec 29, 2024 • 0 new comments

• Add `OAuth2AuthorizedClientManager` autoconfiguration without `spring-boot-starter-web` dependency

  #15877 commented on Dec 30, 2024 • 0 new comments

• OIDC Back-Channel Logout Support for Clustered Servers

  #16321 commented on Dec 30, 2024 • 0 new comments