List view

Allow retrieving username from SAML Assertion Attributes

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#12136 In spring-projects/spring-security;

· by palakova was closed on Apr 9, 2025

Add RelayState-based Authentication Request Respository

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#14793 In spring-projects/spring-security;

· by shardasud16 was closed on Apr 3, 2025

Support Customizing Set of OpenSAML Validators

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#15578 In spring-projects/spring-security;

· by mathewm3 was closed on Apr 2, 2025

Saml2WebSsoAuthenticationFilter should allow requests through when SAMLResponse is absent

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16000 In spring-projects/spring-security;

· by jzheaux was closed on Apr 3, 2025

AuthorizeReturnObject should target the authorized object within MVC return values

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16059 In spring-projects/spring-security;

· by jzheaux was closed on Apr 10, 2025

Prepare Request Matching for Spring Framework Changes

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16417 In spring-projects/spring-security;

· by jzheaux was closed on Apr 7, 2025

Deprecate usages of PathMatcher in Web Socket support

in: messagingAn issue in spring-security-messagingAn issue in spring-security-messaging

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16500 In spring-projects/spring-security;

· by jzheaux was closed on Mar 19, 2025

Update HandlerMappingIntrospector Usage in CORS support

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16501 In spring-projects/spring-security;

· by jzheaux was closed on Mar 26, 2025

Release 6.5.0-RC1

type: taskA general taskA general task

Status: Closed (completed).

#16974 In spring-projects/spring-security;

· by rwinch was closed on Apr 21, 2025

Update <code>HandlerMappingIntrospector</code> Usage in Cache filter support

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16536 In spring-projects/spring-security;

· by jzheaux was closed on Apr 7, 2025

Deprecate <code>AntPathRequestMatcher</code>

Status: Closed (completed).

#16632 In spring-projects/spring-security;

· by jzheaux was closed on Mar 26, 2025

Add request_uri in OAuth2ParameterNames

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16947 In spring-projects/spring-security;

· by jgrandja was closed on Apr 16, 2025

Add AuthenticationEntryPoint for DPoP

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16900 In spring-projects/spring-security;

· by jgrandja was closed on Apr 7, 2025

<code>ServerBearerTokenAuthenticationConverter</code> validates parameters when not enabled

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#16902 In spring-projects/spring-security;

· by sjohnr was closed on Apr 7, 2025

OAuth2 Client Authentication section of docs uses deprecated classes

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16925 In spring-projects/spring-security;

· by sjohnr was closed on Apr 11, 2025

Prevent downgraded usage of DPoP-bound access tokens

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16937 In spring-projects/spring-security;

· by jgrandja was closed on Apr 14, 2025

Prepare oauth2-client deprecations for removal in Spring Security 7

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16913 In spring-projects/spring-security;

· by sjohnr was closed on Apr 9, 2025

Add MatchResult to MessageMatcher

in: messagingAn issue in spring-security-messagingAn issue in spring-security-messaging

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16766 In spring-projects/spring-security;

· by jzheaux was closed on Mar 19, 2025

Deprecate <code>SecurityMetadataSource</code> and implementations

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16772 In spring-projects/spring-security;

· by jzheaux was closed on Mar 19, 2025

Deprecate <code>SecurityConfig</code>

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16773 In spring-projects/spring-security;

· by jzheaux was closed on Mar 19, 2025

Deprecate <code>ConfigAttribute</code>

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16774 In spring-projects/spring-security;

· by jzheaux was closed on Mar 19, 2025

RequestMatcherDelegatingWebInvocationPrivilegeEvaluator fails with PathPatternRequestMatcher

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Closed (completed).

#16771 In spring-projects/spring-security;

· by rwinch was closed on Mar 21, 2025

Clarify WebInvocationPrivilegeEvaluator JavaDoc

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#16788 In spring-projects/spring-security;

· by sjohnr was closed on Mar 20, 2025

Update ServerOAuth2AuthorizedClientExchangeFilterFunction javadoc

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16789 In spring-projects/spring-security;

· by sjohnr was closed on Mar 20, 2025

Fix attribute name in <code>http.adoc</code>

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16790 In spring-projects/spring-security;

· by sjohnr was closed on Mar 20, 2025