Search results

Enable Null checking in spring-security-oauth2-resource-server via JSpecify

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17822 In spring-projects/spring-security;

· rwinch opened on Aug 29, 2025

· 

7.0.x

Enable Null checking in spring-security-oauth2-jose via JSpecify

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17821 In spring-projects/spring-security;

· rwinch opened on Aug 29, 2025

· 

7.0.x

Enable Null checking in spring-security-oauth2-core via JSpecify

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17820 In spring-projects/spring-security;

· rwinch opened on Aug 29, 2025

· 

7.0.x

Enable Null checking in spring-security-oauth2-client via JSpecify

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17819 In spring-projects/spring-security;

· rwinch opened on Aug 29, 2025

· 

7.0.x

Support @ClientRegistrationId at Class Level

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: ideal-for-contributionAn issue that we actively are looking for someone to help us withAn issue that we actively are looking for someone to help us with

type: enhancementA general enhancementA general enhancement

Status: Open.

#17806 In spring-projects/spring-security;

· rwinch opened on Aug 25, 2025

· 

7.0.x

Align NimbusJwtDecoder HTTP timeout defaults with Nimbus by setting to 500ms

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: feedback-providedFeedback has been providedFeedback has been provided

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 17669

#17669 In spring-projects/spring-security;

· frido37 opened on Aug 7, 2025

· 

7.0.0-M3

Default <code>OidcUser</code> conversion may return mismatch between <code>OAuth2User.getName()</code> and <code>OidcUser.getName()</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17628 In spring-projects/spring-security;

· rwinch opened on Jul 25, 2025

Oidc(ReactiveOAuth2)UserService uses userNameAttributeName when user info endpoint not invoked

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17627 In spring-projects/spring-security;

· rwinch opened on Jul 25, 2025

Default retrieveUserInfo for OidcUserService &amp; OidcReactiveOAuth2UserService are inconsistent

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#17625 In spring-projects/spring-security;

· rwinch opened on Jul 25, 2025

PKCE configuration - enabled by default

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

Status: Open (in progress).

spring-projects/spring-securitynumber 17507

#17507 In spring-projects/spring-security;

· rohan-naik07 opened on Jul 10, 2025

Ensure ID Token is updated after refresh token (Reactive)

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Draft (not ready).

spring-projects/spring-securitynumber 17246

#17246 In spring-projects/spring-security;

· evgeniycheban opened on Jun 14, 2025

· 

7.0.x

Implement OAuth 2.0 Protected Resource Metadata

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#17244 In spring-projects/spring-security;

· jgrandja opened on Jun 13, 2025

· 

7.0.x