List view

Add link to docs zip file to the reference

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16799 In spring-projects/spring-security;

· by rwinch was closed on Mar 21, 2025

Clarify WebInvocationPrivilegeEvaluator JavaDoc

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#16782 In spring-projects/spring-security;

· by sjohnr was closed on Mar 20, 2025

Update ServerOAuth2AuthorizedClientExchangeFilterFunction javadoc

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16783 In spring-projects/spring-security;

· by sjohnr was closed on Mar 20, 2025

Fix attribute name in <code>http.adoc</code>

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16784 In spring-projects/spring-security;

· by sjohnr was closed on Mar 20, 2025

[Docs] Broken link on Spring MVC Test Integration page

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#16785 In spring-projects/spring-security;

· by sjohnr was closed on Mar 20, 2025

WebFlux reference links to Servlet docs

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#16786 In spring-projects/spring-security;

· by sjohnr was closed on Mar 20, 2025

OpenSaml support should preserve encrypted elements for further analysis

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: bugA general bugA general bug

Status: Closed (completed).

#16367 In spring-projects/spring-security;

· by kimgoetzke was closed on Apr 21, 2025

<code>ServerBearerTokenAuthenticationConverter</code> validates parameters when not enabled

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#16901 In spring-projects/spring-security;

· by sjohnr was closed on Apr 7, 2025

CookieServerCsrfTokenRepository.withHttpOnlyFalse() ineffective if setCookieCustomizer() is used

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Closed (completed).

#16862 In spring-projects/spring-security;

· by jzheaux was closed on Apr 1, 2025

Sorting in AuthorizationAdvisorProxyFactory should be thread-safe

in: coreAn issue in spring-security-coreAn issue in spring-security-core

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#16837 In spring-projects/spring-security;

· by jzheaux was closed on Mar 27, 2025

XML config does not apply <code>request-handler-ref</code> to <code>CsrfAuthenticationStrategy</code>

in: configAn issue in spring-security-configAn issue in spring-security-config

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#16844 In spring-projects/spring-security;

· by sjohnr was closed on Mar 28, 2025

Regression with Bcrypt max password length

in: cryptoAn issue in spring-security-cryptoAn issue in spring-security-crypto

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: regressionA regression from a previous releaseA regression from a previous release

Status: Closed (completed).

#16951 In spring-projects/spring-security;

· by jgrandja was closed on Apr 17, 2025

Release 6.4.5

type: taskA general taskA general task

Status: Closed (completed).

#16972 In spring-projects/spring-security;

· by rwinch was closed on Apr 21, 2025

Correct closing tag in default PassKey HTML form

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Closed (abandoned).

spring-projects/spring-securitynumber 16601

#16601 In spring-projects/spring-security;

· by AB-xdev was closed on Mar 18, 2025

Fix WebAuthn saves Anonymous PublicKeyCredentialUserEntity

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 16606

#16606 In spring-projects/spring-security;

· by Borghii was closed on Mar 25, 2025

Bump io.spring.gradle:spring-security-release-plugin from 1.0.3 to 1.0.4

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 16919

#16919 In spring-projects/spring-security;

· by dependabot was closed on Apr 10, 2025

Bump org.hibernate.orm:hibernate-core from 6.6.12.Final to 6.6.13.Final

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 16895

#16895 In spring-projects/spring-security;

· by dependabot was closed on Apr 7, 2025

Bump spring-io/spring-doc-actions from 0.0.19 to 0.0.20

in: buildAn issue in the buildAn issue in the build

type: taskA general taskA general task

Status: Merged (completed).

spring-projects/spring-securitynumber 16894

#16894 In spring-projects/spring-security;

· by dependabot was closed on Apr 7, 2025

Bump org-aspectj from 1.9.22.1 to 1.9.24

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 16928

#16928 In spring-projects/spring-security;

· by dependabot was closed on Apr 14, 2025

Bump org.hibernate.orm:hibernate-core from 6.6.11.Final to 6.6.12.Final

status: duplicateA duplicate of another issueA duplicate of another issue

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 16851

#16851 In spring-projects/spring-security;

· by dependabot was closed on Mar 31, 2025

Bump io.micrometer:micrometer-observation from 1.14.5 to 1.14.6

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 16938

#16938 In spring-projects/spring-security;

· by dependabot was closed on Apr 15, 2025

Bump io.projectreactor:reactor-bom from 2023.0.16 to 2023.0.17

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 16944

#16944 In spring-projects/spring-security;

· by dependabot was closed on Apr 16, 2025

Bump org-eclipse-jetty from 11.0.24 to 11.0.25

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 16758

#16758 In spring-projects/spring-security;

· by dependabot was closed on Mar 18, 2025

Bump ch.qos.logback:logback-classic from 1.5.17 to 1.5.18

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 16767

#16767 In spring-projects/spring-security;

· by dependabot was closed on Mar 19, 2025

Bump spring-io/spring-doc-actions from 0.0.18 to 0.0.19

in: buildAn issue in the buildAn issue in the build

status: duplicateA duplicate of another issueA duplicate of another issue

type: taskA general taskA general task

Status: Merged (completed).

spring-projects/spring-securitynumber 16811

#16811 In spring-projects/spring-security;

· by dependabot was closed on Mar 24, 2025