List view

Support Modular Spring Security Configuration

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#16258 In spring-projects/spring-security;

· by rwinch was closed on Aug 20, 2025

SpringTestContext should register a WebTestClient Bean

in: buildAn issue in the buildAn issue in the build

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17780 In spring-projects/spring-security;

· by rwinch was closed on Aug 20, 2025

Enable Null checking in spring-security-data via JSpecify

in: dataAn issue in spring-security-dataAn issue in spring-security-data

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17789 In spring-projects/spring-security;

· by rwinch was closed on Aug 21, 2025

AuthorizationManager should allow null Authentication

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: bugA general bugA general bug

Status: Closed (completed).

#17795 In spring-projects/spring-security;

· by rwinch was closed on Aug 22, 2025

Support Expression Templates by Default

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17763 In spring-projects/spring-security;

· by jzheaux was closed on Aug 18, 2025

Add OneTimeTokenAuthentication

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17799 In spring-projects/spring-security;

· by jzheaux was closed on Aug 22, 2025

APIs should Use <code>Supplier&lt;? extends @Nullable Authentication&gt;</code>

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: bugA general bugA general bug

Status: Closed (completed).

#17814 In spring-projects/spring-security;

· by rwinch was closed on Aug 29, 2025

Enable Null checking in spring-security-messaging via JSpecify

in: messagingAn issue in spring-security-messagingAn issue in spring-security-messaging

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17817 In spring-projects/spring-security;

· by rwinch was closed on Aug 29, 2025

Enable Null checking in spring-security-cas via JSpecify

in: casAn issue in spring-security-casAn issue in spring-security-cas

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17826 In spring-projects/spring-security;

· by rwinch was closed on Aug 31, 2025

Enable Null checking in spring-security-taglibs via JSpecify

in: taglibsAn issue in spring-security-taglibsAn issue in spring-security-taglibs

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17828 In spring-projects/spring-security;

· by rwinch was closed on Aug 31, 2025

Enable Null checking in spring-security-rsocket via JSpecify

in: rsocket

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17827 In spring-projects/spring-security;

· by rwinch was closed on Aug 31, 2025

RequestMatchers should implement equals and hashCode

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17842 In spring-projects/spring-security;

· by jzheaux was closed on Sep 3, 2025

AuthenticatedMatcher#withRoles should only check roles

in: testAn issue in spring-security-testAn issue in spring-security-test

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17843 In spring-projects/spring-security;

· by jzheaux was closed on Sep 3, 2025

Add SecurityAssertions

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17844 In spring-projects/spring-security;

· by jzheaux was closed on Sep 3, 2025

Enable Null checking in spring-security-webauthn via JSpecify

in: webauthnWebAuthn and PasskeysWebAuthn and Passkeys

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17839 In spring-projects/spring-security;

· by rwinch was closed on Sep 3, 2025

Enable Null checking in spring-security-test via JSpecify

in: testAn issue in spring-security-testAn issue in spring-security-test

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17840 In spring-projects/spring-security;

· by rwinch was closed on Sep 3, 2025

Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.2 to 0.0.3

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17765

#17765 In spring-projects/spring-security;

· by dependabot was closed on Aug 20, 2025

Remove unused import

in: buildAn issue in the buildAn issue in the build

Status: Merged (completed).

spring-projects/spring-securitynumber 17750

#17750 In spring-projects/spring-security;

· by ngocnhan-tran1996 was closed on Aug 20, 2025

Fix misleading variable name in authentication filter

in: buildAn issue in the buildAn issue in the build

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: taskA general taskA general task

Status: Merged (completed).

spring-projects/spring-securitynumber 17751

#17751 In spring-projects/spring-security;

· by jaehwan02 was closed on Aug 20, 2025

Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.3 to 0.0.4

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17776

#17776 In spring-projects/spring-security;

· by dependabot was closed on Aug 20, 2025

Change @Bean method signature to return RsaKeyConversionServicePostProcessor instead of BeanFactoryPostProcessor

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17672

#17672 In spring-projects/spring-security;

· by quaff was closed on Aug 21, 2025

Add <code>discoverJwsAlgorithms()</code> in <code>NimbusJwtDecoder</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: feedback-providedFeedback has been providedFeedback has been provided

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17788

#17788 In spring-projects/spring-security;

· by therepanic was closed on Aug 26, 2025

Add option to disable anonymous authentication in <code>RSocketSecurity</code>

in: rsocket

status: feedback-providedFeedback has been providedFeedback has been provided

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17159

#17159 In spring-projects/spring-security;

· by therepanic was closed on Aug 26, 2025

Allow multiple ServerLogoutHandler instances in ServerHttpSecurity

in: configAn issue in spring-security-configAn issue in spring-security-config

status: feedback-providedFeedback has been providedFeedback has been provided

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17381

#17381 In spring-projects/spring-security;

· by blake-bauman was closed on Sep 5, 2025

Align NimbusJwtDecoder HTTP timeout defaults with Nimbus by setting to 500ms

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: feedback-providedFeedback has been providedFeedback has been provided

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17669

#17669 In spring-projects/spring-security;

· by frido37 was closed on Sep 2, 2025