-
Notifications
You must be signed in to change notification settings - Fork 6.2k
Pull requests: spring-projects/spring-security
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Deprecate Hex in favor of An issue we've not yet triaged
java.util.HexFormat
status: waiting-for-triage
#19023
opened Apr 2, 2026 by
therepanic
Loading…
Bump com.webauthn4j:webauthn4j-core from 0.31.1.RELEASE to 0.31.2.RELEASE
type: dependency-upgrade
A dependency upgrade
#19021
opened Apr 2, 2026 by
dependabot
bot
Loading…
Complete nullability annotations in remaining equals methods
status: waiting-for-triage
An issue we've not yet triaged
#19016
opened Apr 1, 2026 by
therepanic
Loading…
Add Jackson 2 fallback docs
status: waiting-for-triage
An issue we've not yet triaged
#19015
opened Apr 1, 2026 by
hardik-xi11
Loading…
Bump org.hibernate.orm:hibernate-core from 6.6.45.Final to 6.6.46.Final
type: dependency-upgrade
A dependency upgrade
#19010
opened Mar 31, 2026 by
dependabot
bot
Loading…
Use existing token repository if present
status: waiting-for-triage
An issue we've not yet triaged
#19001
opened Mar 28, 2026 by
indy5858
Loading…
Add unless support to AdditionalRequiredFactorsBuilder
status: waiting-for-triage
An issue we've not yet triaged
#18939
opened Mar 19, 2026 by
therepanic
Loading…
Fix WebAuthn to publish authentication events gh-18113
in: webauthn
WebAuthn and Passkeys
type: enhancement
A general enhancement
Document risks of retaining credentials
status: waiting-for-triage
An issue we've not yet triaged
#18936
opened Mar 19, 2026 by
soowanx
Loading…
Allow custom settings in ClientRegistration.ClientSettings
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
#18933
opened Mar 18, 2026 by
pranavmanglik
Loading…
3 of 4 tasks
Consider using RetryTemplate for resolving provider configuration
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
#18898
opened Mar 15, 2026 by
evgeniycheban
Loading…
Add a configurable ServerAuthenticationSuccessHandler to OAuth2Resour…
in: config
An issue in spring-security-config
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
status: waiting-for-feedback
We need additional information before we can continue
type: enhancement
A general enhancement
Add An issue we've not yet triaged
Reporting-Endpoints header support to ContentSecurityPolicyConfig
status: waiting-for-triage
#18833
opened Mar 2, 2026 by
therepanic
Loading…
Enable Enter key submission for One-Time Token login
in: web
An issue in web modules (web, webmvc)
status: waiting-for-feedback
We need additional information before we can continue
type: enhancement
A general enhancement
#18824
opened Feb 28, 2026 by
AnanthaKrishnanJ2001
Loading…
Add optional nested Active Directory group resolution
status: waiting-for-triage
An issue we've not yet triaged
#18823
opened Feb 28, 2026 by
wonderfulrosemari
Loading…
Make restOperations configurable in OidcBackChannelLogoutHandler
status: waiting-for-triage
An issue we've not yet triaged
#18821
opened Feb 28, 2026 by
duoduobingbing
Loading…
Add WebTestClient request builders for form login/logout
status: waiting-for-triage
An issue we've not yet triaged
#18815
opened Feb 27, 2026 by
wonderfulrosemari
Loading…
Add authenticationSuccessHandler for OAuth2 auth code callback
status: waiting-for-triage
An issue we've not yet triaged
#18814
opened Feb 27, 2026 by
wonderfulrosemari
Loading…
Add application-scoped access tokens for reactive OAuth2 client
status: waiting-for-triage
An issue we've not yet triaged
#18774
opened Feb 22, 2026 by
jyx-07
Loading…
Warn when securityMatcher misses oauth2Login URLs
status: waiting-for-triage
An issue we've not yet triaged
#18759
opened Feb 18, 2026 by
wonderfulrosemari
Loading…
Bump io.mockk:mockk from 1.14.7 to 1.14.9
type: dependency-upgrade
A dependency upgrade
#18598
opened Jan 27, 2026 by
dependabot
bot
Loading…
Lazily instantiate default components in WebAuthnConfigurer
status: waiting-for-triage
An issue we've not yet triaged
#18586
opened Jan 25, 2026 by
ryujungkyun
Loading…
Clarify behavior when multiple CorsConfigurationSource beans are present
status: waiting-for-triage
An issue we've not yet triaged
#18584
opened Jan 25, 2026 by
mjkang4416
Loading…
Gh 18561 fix jackson date override
status: waiting-for-triage
An issue we've not yet triaged
#18582
opened Jan 25, 2026 by
Khyojae
Loading…
Previous Next
ProTip!
no:milestone will show everything without a milestone.