List view

StrictFirewallServerWebExchange should still protect when request is mutated

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Closed (completed).

#16978 In spring-projects/spring-security;

· by siddhivinayak-sk was closed on May 2, 2025

Update to io.spring.gradle:spring-security-release-plugin:1.0.5

in: buildAn issue in the buildAn issue in the build

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Closed (completed).

#16975 In spring-projects/spring-security;

· by rwinch was closed on May 2, 2025

Clear Site Data references non-existent constructor

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Closed (completed).

#16948 In spring-projects/spring-security;

· by ivopogace was closed on May 2, 2025

Release 6.3.10

type: taskA general taskA general task

Status: Closed (completed).

#17140 In spring-projects/spring-security;

· by rwinch was closed on May 19, 2025

Bump org.apache.maven:maven-resolver-provider from 3.9.9 to 3.9.10

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17211

#17211 In spring-projects/spring-security;

· by dependabot was closed on Jun 9, 2025

Bump io-spring-javaformat from 0.0.45 to 0.0.46

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17198

#17198 In spring-projects/spring-security;

· by dependabot was closed on Jun 9, 2025

Bump io.projectreactor:reactor-bom from 2023.0.18 to 2023.0.19

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17231

#17231 In spring-projects/spring-security;

· by dependabot was closed on Jun 12, 2025

Bump io.projectreactor:reactor-bom from 2023.0.17 to 2023.0.18

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17101

#17101 In spring-projects/spring-security;

· by dependabot was closed on May 14, 2025

Update the docs to use assertingparty instead of identityprovider to close #12810

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 17081

#17081 In spring-projects/spring-security;

· by danilopiazza was closed on May 13, 2025

Bump org-apache-maven-resolver from 1.9.22 to 1.9.23

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17085

#17085 In spring-projects/spring-security;

· by dependabot was closed on May 13, 2025

Fix IllegalArgumentException message for unknown Argon2 types

in: cryptoAn issue in spring-security-cryptoAn issue in spring-security-crypto

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 16971

#16971 In spring-projects/spring-security;

· by rntrp was closed on Apr 24, 2025

Bump org.springframework.data:spring-data-bom from 2024.0.10 to 2024.0.11

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 16982

#16982 In spring-projects/spring-security;

· by dependabot was closed on Apr 23, 2025

ClientRegistrations#fromIssuerLocation should not swallow 4xx exception messages

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 16993

#16993 In spring-projects/spring-security;

· by evgeniycheban was closed on Apr 29, 2025

Use proper configuration key in Opaque Token documentation

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 17005

#17005 In spring-projects/spring-security;

· by quaff was closed on Apr 29, 2025

Remove duplicate lines from X.509 documentation

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

status: feedback-providedFeedback has been providedFeedback has been provided

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 17010

#17010 In spring-projects/spring-security;

· by ronodhirSoumik was closed on May 1, 2025

Bump Gradle Wrapper from 8.13 to 8.14

in: buildAn issue in the buildAn issue in the build

type: enhancementA general enhancementA general enhancement

Status: Closed (abandoned).

spring-projects/spring-securitynumber 16999

#16999 In spring-projects/spring-security;

· by github-actions was closed on Apr 29, 2025

Bump io.spring.gradle:spring-security-release-plugin from 1.0.5 to 1.0.6

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17039

#17039 In spring-projects/spring-security;

· by dependabot was closed on May 6, 2025

Correct method name in document

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 17044

#17044 In spring-projects/spring-security;

· by ngocnhan-tran1996 was closed on May 6, 2025

Add SAML 2.0 migration guide from Spring Security SAML Extension

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17076

#17076 In spring-projects/spring-security;

· by snowykte0426 was closed on May 15, 2025

Bump org.springframework:spring-framework-bom from 6.1.19 to 6.1.20

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17122

#17122 In spring-projects/spring-security;

· by dependabot was closed on May 16, 2025

Bump io-spring-javaformat from 0.0.43 to 0.0.45

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17151

#17151 In spring-projects/spring-security;

· by dependabot was closed on May 21, 2025

Use HttpStatus in back-channel logout filters

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 17128

#17128 In spring-projects/spring-security;

· by therepanic was closed on May 21, 2025

Advise overriding equals() and hashCode() in UserDetails implementations

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17141

#17141 In spring-projects/spring-security;

· by Gurunathan16 was closed on May 21, 2025

Improve AbstractPreAuthenticatedProcessingFilter docs

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 16985

#16985 In spring-projects/spring-security;

· by m0rk4 was closed on May 19, 2025

Bump org.springframework.data:spring-data-bom from 2024.0.11 to 2024.0.12

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17135

#17135 In spring-projects/spring-security;

· by dependabot was closed on May 19, 2025