Repository Issue Activity (beta)

#11598 Make default expression handler in PrePostMethodSecurityConfiguration to use existing permission evaluator

#19084 PrePostMethodSecurityConfiguration is missing a setter for custom PermissionEvaluator

#19649 TokenType reference comparison is used in BearerTokenAuthentication

#19648 TokenType reference comparison is used in BearerTokenAuthentication

#19377 TokenType reference comparison is used in BearerTokenAuthentication

#19647 Header Writers should not corrupt Jetty HttpFields state in reactive ResponseBodyEmitter handlers

#19646 Header Writers should not corrupt Jetty HttpFields state in reactive ResponseBodyEmitter handlers

#9175 Thread-unsafe usage of HttpServletResponse corrupting jetty HttpFields state in reactive ResponseBodyEmitter handlers

#19643 Expose JWKSourceBuilder options (cache TTL, refresh-ahead, outage tolerance) on JwkSetUriJwtDecoderBuilder

#19510 Improve readability and simplify null check in `ProviderManager.checkState()`

#10826 Consider having ContentSecurityPolicyHeaderWriter supply a script nonce

#5767 No API to perform formLogin and logout on webflux

#18457 Remove javadoc warnings for spring-security-ldap

#19639 Preserve the resource path in the default resource_metadata challenge

#19638 [Client] Support JWT for Client Authentication, as defined in RFC 7523

#19317 NoClassDefFound with version 7.1.0

#19632 Turn Off Auto-merge for Maintenance Branch

#19631 Turn Off Auto-merge for Maintenance Branch

#19424 Reactive RefreshOidcUserReactiveOAuth2AuthorizationSuccessHandler rotates the WebSession id on token refresh, stranding concurrent requests in a WebFlux BFF

#18458 Remove javadoc warnings for spring-security-messaging

#18443 Remove javadoc warnings

#19627 Fix for #18243 (CacheSaml2AuthenticationRequestRepository.saveAuthenticationRequest(..) throws IllegalArgumentException) is missing in 7.1.1

#19628 Spring security becomes unusable when OpenSAML is on the module path

#14245 Consider removing com.nimbusds:oauth2-oidc-sdk dependency

#19606 Spring Security between 6.3.10 (exclusive) and at least 6.5.11 (inclusive) breaks SAML signature validation due to namespace hoisting