List view

HttpSecurity should allow for <code>AuthorizationManager&lt;? super RequestAuthorizationContext&gt;</code>

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17931 In spring-projects/spring-security;

· by rwinch was closed on Sep 18, 2025

Use <code>AuthorizationManagerFactory</code> in Kotlin DSL

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17860 In spring-projects/spring-security;

· by sjohnr was closed on Sep 19, 2025

Add <code>GrantedAuthorities.FACTOR_*_AUTHORITY</code>

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17952 In spring-projects/spring-security;

· by rwinch was closed on Sep 24, 2025

Update terminology to HTTP Service Clients

type: bugA general bugA general bug

type: taskA general taskA general task

Status: Closed (completed).

#17947 In spring-projects/spring-security;

· by rwinch was closed on Sep 22, 2025

Default Login Page Should Pre-populate Username Field If Already Logged In

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17935 In spring-projects/spring-security;

· by jzheaux was closed on Sep 24, 2025

Support Automatically Checking for Required Authorities in Authorization Rules

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17900 In spring-projects/spring-security;

· by jzheaux was closed on Sep 23, 2025

Add <code>@EnableGlobalMultiFactorAuthentication</code>

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17954 In spring-projects/spring-security;

· by rwinch was closed on Sep 24, 2025

Add SecurityMockMvcResultMatchers.withAuthorities(String...)

in: testAn issue in spring-security-testAn issue in spring-security-test

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17974 In spring-projects/spring-security;

· by rwinch was closed on Sep 30, 2025

Add AllAuthorities(Reactive)AuthorizationManager

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17916 In spring-projects/spring-security;

· by rwinch was closed on Sep 16, 2025

DelegatingAuthenticationEntryPoint should use RequestMatcherEntry

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17915 In spring-projects/spring-security;

· by rwinch was closed on Sep 16, 2025

Providers Should Add an Authority Representing Successful Authentication

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17933 In spring-projects/spring-security;

· by jzheaux was closed on Sep 19, 2025

Security Expressions Should Allow Returning an AuthorizationManager

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17936 In spring-projects/spring-security;

· by jzheaux was closed on Sep 19, 2025

Add AccessDeniedHandler that Ties Authorities to Authentication Entry Points

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17934 In spring-projects/spring-security;

· by jzheaux was closed on Sep 25, 2025

Remove unnecessary throws Exception from spring-security-config

in: configAn issue in spring-security-configAn issue in spring-security-config

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17957 In spring-projects/spring-security;

· by joshlong was closed on Sep 25, 2025

DelegatingAuthenticationEntryPoint.Builder should not throw exception when default entry point is specified

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Closed (completed).

#17955 In spring-projects/spring-security;

· by jzheaux was closed on Sep 25, 2025

Add support for OAuth 2.0 Dynamic Client Registration Protocol

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17964 In spring-projects/spring-security;

· by jgrandja was closed on Sep 25, 2025

Consider disabling device_code grant by default

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

Status: Closed (completed).

#17998 In spring-projects/spring-security;

· by jgrandja was closed on Oct 3, 2025

HttpSecurity.oauth2AuthorizationServer should not automatically set <code>HttpSecurity.securityMatcher</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Closed (completed).

#17965 In spring-projects/spring-security;

· by rwinch was closed on Oct 1, 2025

Add <code>TestingAuthenticationToken(Object principal,Object credential,String... authorities)</code>

in: testAn issue in spring-security-testAn issue in spring-security-test

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17980 In spring-projects/spring-security;

· by rwinch was closed on Oct 1, 2025

Prevent Duplicate <code>GrantedAuthority#getAuthority()</code> at time of Authentication

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Closed (completed).

#17981 In spring-projects/spring-security;

· by rwinch was closed on Oct 1, 2025

Implement OAuth 2.0 Protected Resource Metadata

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17244 In spring-projects/spring-security;

· by jgrandja was closed on Oct 2, 2025

Add FactorGrantedAuthority

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17996 In spring-projects/spring-security;

· by rwinch was closed on Oct 3, 2025

Authentication should use FactorGrantedAuthority

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#18001 In spring-projects/spring-security;

· by rwinch was closed on Oct 3, 2025

Add AllFactorsAuthorizationManager

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17997 In spring-projects/spring-security;

· by rwinch was closed on Oct 3, 2025

DelegatingMissingAuthorityAccessDeniedHandler Should Use RequiredFactorErrors

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#18002 In spring-projects/spring-security;

· by rwinch was closed on Oct 3, 2025