Search results

Default <code>OidcUser</code> conversion may return mismatch between <code>OAuth2User.getName()</code> and <code>OidcUser.getName()</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17628 In spring-projects/spring-security;

· rwinch opened on Jul 25, 2025

Oidc(ReactiveOAuth2)UserService uses userNameAttributeName when user info endpoint not invoked

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17627 In spring-projects/spring-security;

· rwinch opened on Jul 25, 2025

Default retrieveUserInfo for OidcUserService &amp; OidcReactiveOAuth2UserService are inconsistent

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17625 In spring-projects/spring-security;

· rwinch opened on Jul 25, 2025

Remove usage of <code>SpringSecurityCoreVersion.SERIAL_VERSION_UID</code>

in: coreAn issue in spring-security-coreAn issue in spring-security-core

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: bugA general bugA general bug

Status: Open.

#17623 In spring-projects/spring-security;

· rwinch opened on Jul 24, 2025

· 

7.0.x

PKCE configuration - enabled by default

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

Status: Open (in progress).

spring-projects/spring-securitynumber 17507

#17507 In spring-projects/spring-security;

· rohan-naik07 opened on Jul 10, 2025

JwtDecoderFactory is missing and throws ClassNotFoundException with Bearer token and spring-boot:3.5.0

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17249 In spring-projects/spring-security;

· vanrenter opened on Jun 14, 2025

· 

6.5.3

Improve authoritiesClaimName validation in JwtGrantedAuthoritiesConverter

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 17247

#17247 In spring-projects/spring-security;

· chanbinme opened on Jun 14, 2025

Ensure ID Token is updated after refresh token (Reactive)

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Draft (not ready).

spring-projects/spring-securitynumber 17246

#17246 In spring-projects/spring-security;

· evgeniycheban opened on Jun 14, 2025

· 

7.0.x

Implement OAuth 2.0 Protected Resource Metadata

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17244 In spring-projects/spring-security;

· jgrandja opened on Jun 13, 2025

· 

7.0.x

Unhandled AuthenticationServiceException in the default exception handing of http filter chain (Resource Server)

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: feedback-providedFeedback has been providedFeedback has been provided

Status: Open.

#17234 In spring-projects/spring-security;

· kpur-sbab opened on Jun 11, 2025

<code>ServerOAuth2AuthorizedClientExchangeFilterFunction</code>: scope client credential tokens to the application

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17218 In spring-projects/spring-security;

· ch4mpy opened on Jun 7, 2025

Add Support DPoP Customization

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Draft (not ready).

spring-projects/spring-securitynumber 17202

#17202 In spring-projects/spring-security;

· franticticktick opened on Jun 3, 2025

· 

7.0.x