List view

Consider removing generics from <code>AuthorizationRequestRepository</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

Status: Open.

#15426 In spring-projects/spring-security;

· sjohnr opened on Jul 15, 2024

Consider favoring ObjectProvider#getIfAvailable

in: configAn issue in spring-security-configAn issue in spring-security-config

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#15821 In spring-projects/spring-security;

· jzheaux opened on Sep 17, 2024

Leave Filter Chain Observations Off By Default

in: configAn issue in spring-security-configAn issue in spring-security-config

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#15858 In spring-projects/spring-security;

· jzheaux opened on Sep 26, 2024

AnonymousConfigurer.authorities only accepts GrantedAuthorities but no subtypes of GrantedAuthorities

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Open.

#14435 In spring-projects/spring-security;

· tobias-lippert opened on Jan 10, 2024

ServerCsrfTokenRequestHandler should return reactive types

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#16869 In spring-projects/spring-security;

· jzheaux opened on Apr 2, 2025

Declare authorization rules one at a time

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Open.

#16509 In spring-projects/spring-security;

· jzheaux opened on Jan 30, 2025

Consider changing default encoder in PasswordEncoderFactories

for: team-attentionThis ticket should be discussed as a team before proceedingThis ticket should be discussed as a team before proceeding

type: enhancementA general enhancementA general enhancement

Status: Open.

#16879 In spring-projects/spring-security;

· jgrandja opened on Apr 4, 2025

Consider using Bouncy Castle BCrypt implementation

for: team-attentionThis ticket should be discussed as a team before proceedingThis ticket should be discussed as a team before proceeding

type: enhancementA general enhancementA general enhancement

Status: Open.

#16880 In spring-projects/spring-security;

· jgrandja opened on Apr 4, 2025

Null safety via JSpecify

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16882 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Kotlin 2.2 Upgrade

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16884 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Declare Spring modules with JDK 9 module metadata

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16885 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Remove HandlerMappingIntrospector Usage

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: taskA general taskA general task

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16886 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

We should remove usage of PathMatcher in web modules

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16887 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Align Metadata Annotation Support with Spring Framework 7

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16890 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Programatic Bean Registration

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16817 In spring-projects/spring-security;

· rwinch opened on Mar 24, 2025

Prepare for 2FA

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Open.

#11364 In spring-projects/spring-security;

· rwinch opened on Jun 10, 2022

Throw custom Exception when the HTTP Method is rejected

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Open.

#12191 In spring-projects/spring-security;

· brandon1024 opened on Nov 10, 2022

Include Compromised Password Information in <code>UserDetails</code>

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Open.

#15745 In spring-projects/spring-security;

· marcusdacoregio opened on Sep 5, 2024

Consider adding <code>ClientRegistrationIdResolver</code> to <code>ExchangeFilterFunction</code>s

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#15825 In spring-projects/spring-security;

· sjohnr opened on Sep 18, 2024

Support Reactive One-Time Tokens in a Clustered Environment

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Open.

#15901 In spring-projects/spring-security;

· franticticktick opened on Oct 11, 2024

Sample Code in Documentation Should Link to a Complete Sample

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Open.

#16227 In spring-projects/spring-security;

· rwinch opened on Dec 5, 2024

Add "Best Match" based Web Authorization Rules

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16249 In spring-projects/spring-security;

· rwinch opened on Dec 9, 2024

Add @AuthorizeRequestMapping annotation

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16250 In spring-projects/spring-security;

· rwinch opened on Dec 9, 2024

Consider adding <code>PrincipalResolver</code> to <code>ExchangeFilterFunctions</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16284 In spring-projects/spring-security;

· sjohnr opened on Dec 13, 2024

Default value for ClientRegistration redirect-uri

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16377 In spring-projects/spring-security;

· rwinch opened on Jan 8, 2025