spring-security
https://github.com/spring-projects/spring-security
Java
Spring Security
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Java not yet supported216 Subscribers
View all SubscribersAdd a CodeTriage badge to spring-security
Help out
- Issues
- Clarify CORS Javadoc on HttpSecurity#cors
- `OidcAuthorizationCodeAuthenticationProvider` is missing a `FactorGrantedAuthority`
- OidcAuthorizationCodeAuthenticationProvider adds FactorGrantedAuthority
- Javadoc for HttpSecurity.cors(Customizer<CorsConfigurer<HttpSecurity>>) gives the impression that CORS is opt-in but that's no longer the case
- WebInvocationPrivilegeEvaluator throws UnsupportedOperationException when a dispatcherTypeMatcher is configured.
- Add OneTimeUse support for SAML assertions
- Final field mutation reported on Java 26
- Use only one instance of `successHandler` in `AbstractAuthenticationFilterConfigurer`
- Correct Spring MVC controller reference
- Fix method name from validateTypes to validateType
- Docs
- Java not yet supported