Search results

Enable Null checking in spring-security-oauth2-resource-server via JSpecify

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17822 In spring-projects/spring-security;

· rwinch opened on Aug 29, 2025

· 

7.0.x

Enable Null checking in spring-security-oauth2-jose via JSpecify

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17821 In spring-projects/spring-security;

· rwinch opened on Aug 29, 2025

· 

7.0.x

Enable Null checking in spring-security-oauth2-core via JSpecify

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17820 In spring-projects/spring-security;

· rwinch opened on Aug 29, 2025

· 

7.0.x

Enable Null checking in spring-security-oauth2-client via JSpecify

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17819 In spring-projects/spring-security;

· rwinch opened on Aug 29, 2025

· 

7.0.x

Default <code>OidcUser</code> conversion may return mismatch between <code>OAuth2User.getName()</code> and <code>OidcUser.getName()</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17628 In spring-projects/spring-security;

· rwinch opened on Jul 25, 2025

Oidc(ReactiveOAuth2)UserService uses userNameAttributeName when user info endpoint not invoked

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17627 In spring-projects/spring-security;

· rwinch opened on Jul 25, 2025

Default retrieveUserInfo for OidcUserService &amp; OidcReactiveOAuth2UserService are inconsistent

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17625 In spring-projects/spring-security;

· rwinch opened on Jul 25, 2025

PKCE configuration - enabled by default

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

Status: Draft (not ready).

spring-projects/spring-securitynumber 17507

#17507 In spring-projects/spring-security;

· rohan-naik07 opened on Jul 10, 2025

· 

7.0.0-RC1

Ensure ID Token is updated after refresh token (Reactive)

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Draft (not ready).

spring-projects/spring-securitynumber 17246

#17246 In spring-projects/spring-security;

· evgeniycheban opened on Jun 14, 2025

· 

7.0.x

Implement OAuth 2.0 Protected Resource Metadata

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17244 In spring-projects/spring-security;

· jgrandja opened on Jun 13, 2025

· 

7.0.x

Unhandled AuthenticationServiceException in the default exception handing of http filter chain (Resource Server)

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: feedback-providedFeedback has been providedFeedback has been provided

Status: Open.

#17234 In spring-projects/spring-security;

· kpur-sbab opened on Jun 11, 2025

<code>ServerOAuth2AuthorizedClientExchangeFilterFunction</code>: scope client credential tokens to the application

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17218 In spring-projects/spring-security;

· ch4mpy opened on Jun 7, 2025