List view

Address BouncyCastle's deprecated AESFastEngine usage

in: cryptoAn issue in spring-security-cryptoAn issue in spring-security-crypto

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 16164

#16164 In spring-projects/spring-security;

· by fjacobs was closed on May 7, 2025

Remove deprecated methods from CookieServerCsrfTokenRepository

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 14139

#14139 In spring-projects/spring-security;

· by milaneuh was closed on May 7, 2025

Improve JdbcUserDetailsManager.userExists method

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 14649

#14649 In spring-projects/spring-security;

· by Shenker93 was closed on May 7, 2025

Add Twitter/X to CommonOAuth2Provider

in: configAn issue in spring-security-configAn issue in spring-security-config

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 16510

#16510 In spring-projects/spring-security;

· by kiruthiga1793 was closed on May 7, 2025

Remove deprecated Cookie method usage

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: taskA general taskA general task

Status: Merged (completed).

spring-projects/spring-securitynumber 17006

#17006 In spring-projects/spring-security;

· by M-Faheem-Khan was closed on May 7, 2025

Remove APPLICATION_JSON_UTF8 usage

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

Status: Merged (completed).

spring-projects/spring-securitynumber 17070

#17070 In spring-projects/spring-security;

· by ngocnhan-tran1996 was closed on May 7, 2025

Bump org-apache-maven-resolver from 1.9.22 to 1.9.23

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17090

#17090 In spring-projects/spring-security;

· by dependabot was closed on May 13, 2025

Bump io.micrometer:micrometer-observation from 1.14.6 to 1.14.7

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17093

#17093 In spring-projects/spring-security;

· by dependabot was closed on May 13, 2025

Bump com.webauthn4j:webauthn4j-core from 0.29.1.RELEASE to 0.29.2.RELEASE

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17092

#17092 In spring-projects/spring-security;

· by dependabot was closed on May 13, 2025

Bump io.projectreactor:reactor-bom from 2025.0.0-M2 to 2025.0.0-M3

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17104

#17104 In spring-projects/spring-security;

· by dependabot was closed on May 14, 2025

Remove 32-byte minimum keyLength restriction in <code>Base64StringKeyGenerator</code>

in: cryptoAn issue in spring-security-cryptoAn issue in spring-security-crypto

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17091

#17091 In spring-projects/spring-security;

· by therepanic was closed on May 14, 2025

Bump org.hibernate.orm:hibernate-core from 7.0.0.CR1 to 7.0.0.CR2

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17114

#17114 In spring-projects/spring-security;

· by dependabot was closed on May 15, 2025

Bump io-spring-javaformat from 0.0.43 to 0.0.45

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17150

#17150 In spring-projects/spring-security;

· by dependabot was closed on May 21, 2025

Bump org.hibernate.orm:hibernate-core from 7.0.0.CR2 to 7.0.0.Final

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17149

#17149 In spring-projects/spring-security;

· by dependabot was closed on May 21, 2025

Bump org.apache.maven:maven-resolver-provider from 3.9.9 to 3.9.10

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17213

#17213 In spring-projects/spring-security;

· by dependabot was closed on Jun 9, 2025

Bump io-spring-javaformat from 0.0.45 to 0.0.46

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17200

#17200 In spring-projects/spring-security;

· by dependabot was closed on Jun 9, 2025

Bump io.spring.develocity.conventions from 0.0.22 to 0.0.23

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17205

#17205 In spring-projects/spring-security;

· by dependabot was closed on Jun 9, 2025

Bump com.webauthn4j:webauthn4j-core from 0.29.2.RELEASE to 0.29.3.RELEASE

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17193

#17193 In spring-projects/spring-security;

· by dependabot was closed on Jun 9, 2025

Fix users schema documentation

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 17190

#17190 In spring-projects/spring-security;

· by Lidoca was closed on Jun 10, 2025

Bump io.micrometer:micrometer-observation from 1.14.7 to 1.14.8

type: dependency-upgradeA dependency upgradeA dependency upgrade

Status: Merged (completed).

spring-projects/spring-securitynumber 17222

#17222 In spring-projects/spring-security;

· by dependabot was closed on Jun 10, 2025

Fix the problem of not deserializing SwitchUserGrantedAuthority in Webflux

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17064

#17064 In spring-projects/spring-security;

· by JohnNiang was closed on May 23, 2025

Make AuthorizationProxyFactory.proxy generic

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 16996

#16996 In spring-projects/spring-security;

· by big-cir was closed on May 23, 2025

Add Support Credentialless COEP Header

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 17027

#17027 In spring-projects/spring-security;

· by franticticktick was closed on May 23, 2025

Remove the redundant punctuation marks in the comments

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 17075

#17075 In spring-projects/spring-security;

· by gamemock was closed on May 23, 2025

Create CsrfCustomizer for SPA configuration

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 16966

#16966 In spring-projects/spring-security;

· by felhag was closed on May 27, 2025