Search results

Make <code>X509CertificateThumbprintValidator</code> configurable through <code>JwtValidators</code> create APIs

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: waiting-for-feedbackWe need additional information before we can continueWe need additional information before we can continue

type: enhancementA general enhancementA general enhancement

Status: Open.

#17131 In spring-projects/spring-security;

· edmundham opened on May 17, 2025

Add possibility to customize JwkSource of NimbusJwtDecoder

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

Status: Open (in progress).

spring-projects/spring-securitynumber 17046

#17046 In spring-projects/spring-security;

· marbon87 opened on May 6, 2025

NimbusJwtEncoder should simplify constructing with javax.security Keys

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 17033

#17033 In spring-projects/spring-security;

· surajbh123 opened on May 2, 2025

 ·  

7.0.x

JwtTimestampsValidator can require exp and nbf claims

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 17030

#17030 In spring-projects/spring-security;

· FerencKemeny opened on May 2, 2025

 ·  

7.0.0-M1

Add support dpop customization

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16940 In spring-projects/spring-security;

· franticticktick opened on Apr 15, 2025

 ·  

7.0.x

Reactive implementation for DPoPAuthenticationProvider &amp; related classes

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16912 In spring-projects/spring-security;

· RyanW02 opened on Apr 9, 2025

 ·  

7.0.x

Remove deprecated implementations of OAuth2AccessTokenResponseClient

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#16909 In spring-projects/spring-security;

· sjohnr opened on Apr 8, 2025

 ·  

7.0.0-M1

Add support for nested user-name-attribute using dot notation

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: waiting-for-feedbackWe need additional information before we can continueWe need additional information before we can continue

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 16857

#16857 In spring-projects/spring-security;

· yybmion opened on Apr 1, 2025

Consider making UserInfo request opt-in instead of default in Spring Security 7

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#16843 In spring-projects/spring-security;

· sjohnr opened on Mar 28, 2025

 ·  

7.0.0-M1

Add Equals and HashCode methods for better comparison.

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 16842

#16842 In spring-projects/spring-security;

· GrmpfNarf opened on Mar 28, 2025

 ·  

7.0.x

SupplierClientRegistrationRepository for reactive stack

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#16750 In spring-projects/spring-security;

· bilak opened on Mar 17, 2025

OAuth2ResourceServerConfigurer#authenticationManagerResolver should override #jwt

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: ideal-for-contributionAn issue that we actively are looking for someone to help us withAn issue that we actively are looking for someone to help us with

type: enhancementA general enhancementA general enhancement

Status: Open.

#16406 In spring-projects/spring-security;

· jgrandja opened on Jan 13, 2025