- 
                Notifications
    You must be signed in to change notification settings 
- Fork 6.2k
Pull requests: spring-projects/spring-security
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
      Docs: document effects of disabling CORS configurer
        
              
                status: waiting-for-triage
  An issue we've not yet triaged 
        
      
    
        
          #18117
            opened Oct 30, 2025  by
            Kehrlann
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Default WebAuthnConfigurer#rpName to rpId
        
              
                status: waiting-for-triage
  An issue we've not yet triaged 
        
      
    
        
          #18115
            opened Oct 29, 2025  by
            Kehrlann
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Bump org.hibernate.orm:hibernate-core from 6.6.33.Final to 6.6.34.Final
        
              
                type: dependency-upgrade
  A dependency upgrade 
        
      
    
        
          #18111
            opened Oct 28, 2025  by
            dependabot
            bot
        
        
            
    
  
    Loading…
 
        
        
      
    
      Bump com.fasterxml.jackson:jackson-bom from 2.18.4.1 to 2.18.5
        
              
                type: dependency-upgrade
  A dependency upgrade 
        
      
    
        
          #18110
            opened Oct 28, 2025  by
            dependabot
            bot
        
        
            
    
  
    Loading…
 
        
        
      
    
      Bump org.hibernate.orm:hibernate-core from 6.6.33.Final to 6.6.34.Final
        
              
                type: dependency-upgrade
  A dependency upgrade 
        
      
    
        
          #18109
            opened Oct 28, 2025  by
            dependabot
            bot
        
        
            
    
  
    Loading…
 
        
        
      
    
      Bump com.fasterxml.jackson:jackson-bom from 2.18.4.1 to 2.18.5
        
              
                type: dependency-upgrade
  A dependency upgrade 
        
      
    
        
          #18108
            opened Oct 28, 2025  by
            dependabot
            bot
        
        
            
    
  
    Loading…
 
        
        
      
    
      Bump org.jetbrains.kotlin:kotlin-gradle-plugin from 2.2.20 to 2.2.21
        
              
                type: dependency-upgrade
  A dependency upgrade 
        
      
    
        
          #18100
            opened Oct 24, 2025  by
            dependabot
            bot
        
        
            
    
  
    Loading…
 
        
        
      
    
      Bump org.jetbrains.kotlin:kotlin-bom from 2.2.20 to 2.2.21
        
              
                type: dependency-upgrade
  A dependency upgrade 
        
      
    
        
          #18099
            opened Oct 24, 2025  by
            dependabot
            bot
        
        
            
    
  
    Loading…
 
        
        
      
    
      Add generic request validator for refresh token
        
              
                status: waiting-for-triage
  An issue we've not yet triaged 
        
      
    
        
          #18098
            opened Oct 22, 2025  by
            therepanic
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Create Jackson Mixin for OneTimeTokenAuthenticationToken
        
              
                in: web
  An issue in web modules (web, webmvc) 
              
                status: feedback-provided
  Feedback has been provided 
              
                type: enhancement
  A general enhancement 
        
      
    
      
  
        
          #18096
            opened Oct 22, 2025  by
            marcusdacoregio
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Corrected the property description.
        
              
                status: waiting-for-triage
  An issue we've not yet triaged 
        
      
    
        
          #18094
            opened Oct 21, 2025  by
            SimonVonXCVII
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Bump org.springframework:spring-framework-bom from 7.0.0-RC1 to 7.0.0-SNAPSHOT
        
              
                type: dependency-upgrade
  A dependency upgrade 
        
      
    
        
          #18091
            opened Oct 21, 2025  by
            dependabot
            bot
        
        
            
    
  
    Loading…
 
        
        
      
    
      Bump org.springframework.ldap:spring-ldap-core from 4.0.0-RC1 to 4.0.0-SNAPSHOT
        
              
                type: dependency-upgrade
  A dependency upgrade 
        
      
    
        
          #18090
            opened Oct 21, 2025  by
            dependabot
            bot
        
        
            
    
  
    Loading…
 
        
        
      
    
      Bump io.projectreactor:reactor-bom from 2025.0.0-RC1 to 2025.0.0-SNAPSHOT
        
              
                type: dependency-upgrade
  A dependency upgrade 
        
      
    
        
          #18089
            opened Oct 21, 2025  by
            dependabot
            bot
        
        
            
    
  
    Loading…
 
        
        
      
    
      Fixed nullity discreapency between documenation and assert check in R…
        
              
                status: waiting-for-triage
  An issue we've not yet triaged 
        
      
    
      
  
        
          #18076
            opened Oct 19, 2025  by
            ronodhirSoumik
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Use An issue we've not yet triaged 
        
      
    
      
  SmartHttpMessageConverter over GenericHttpMessageConverter where possible
        
              
                status: waiting-for-triage
  
        
          #18075
            opened Oct 19, 2025  by
            therepanic
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Honor @Primary for UserDetailsService and UserDetailsPasswordService in InitializeUserDetailsBeanManagerConfigurer
        
              
                in: config
  An issue in spring-security-config 
              
                type: bug
  A general bug 
        
      
    
      
  
        
          #18015
            opened Oct 6, 2025  by
            siva-sai-udaygiri
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Create SqlAllAuthoritiesAuthorizationManager
        
              
                status: waiting-for-triage
  An issue we've not yet triaged 
        
      
    
      
  
        
          #17975
            opened Sep 30, 2025  by
            therepanic
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Refactor XOR CSRF Token Encoding into Separate Encoder Class with Unit Tests
        
              
                status: waiting-for-triage
  An issue we've not yet triaged 
        
      
    
      
  
        
          #17969
            opened Sep 28, 2025  by
            nieuwmijnleven
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Fix OAuth2LoginConfigurer AuthenticationProvider decoration
        
              
                status: waiting-for-triage
  An issue we've not yet triaged 
        
      
    
      
  
        
          #17966
            opened Sep 26, 2025  by
            seeun0210
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Align JWT Testing Documentation
        
              
                status: waiting-for-feedback
  We need additional information before we can continue 
        
      
    
      
  
        
          #17951
            opened Sep 23, 2025  by
            ElMansourH
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Fix OIDC discovery to fallback on text/html responses
        
              
                status: waiting-for-triage
  An issue we've not yet triaged 
        
      
    
      
  
        
          #17927
            opened Sep 17, 2025  by
            znight1020
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Deprecate Authorization Logic that uses An issue we've not yet triaged 
        
      
    
      
  FilterInvocation
        
              
                status: waiting-for-triage
  
        
          #17884
            opened Sep 14, 2025  by
            therepanic
            
        
        
            
    
  
    Loading…
 
        
        
      
    
      Ability to configure authenticationDetailsSource in AnonymousConfigurer
        
              
                in: config
  An issue in spring-security-config 
              
                status: blocked
  An issue that's blocked on an external project change 
              
                type: enhancement
  A general enhancement 
        
      
    
    
      
  
      Add TimestampedGrantedAuthority for time-based authorization
        
              
                in: core
  An issue in spring-security-core 
              
                type: enhancement
  A general enhancement 
        
      
    
    
      
  Previous Next
  
  
  ProTip!
  Type g i on any issue or pull request to go back to the issue listing page.