Search results

with spring-security-oatuh2-jose-7.1.0 a jwt with loa value null always returns an error

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#19346 In spring-projects/spring-security;

· kostja86 opened on Jun 17, 2026

OidcProviderConfigurationEndpointFilter (multi-issuer) only matches the path-append discovery location, not path-insertion — asymmetric with OAuth2AuthorizationServerMetadataEndpointFilter and breaks MCP discovery priority #2

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#19342 In spring-projects/spring-security;

· sandipchitale opened on Jun 14, 2026

InMemoryReactiveSessionRegistry can lose a session under concurrent save/remove

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

Status: Open.

#19338 In spring-projects/spring-security;

· junhyeong9812 opened on Jun 14, 2026

InMemoryUserDetailsManager.changePassword fails for non-lowercase usernames

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

Status: Open.

#19336 In spring-projects/spring-security;

· junhyeong9812 opened on Jun 14, 2026

DefaultAuthorizationManagerFactory.anonymous() applies additionalAuthorization

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

Status: Open.

#19334 In spring-projects/spring-security;

· junhyeong9812 opened on Jun 14, 2026

JwtAuthenticationToken.principal and JwtAuthenticationToken.Builder.principal types do not match

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#19333 In spring-projects/spring-security;

· kalgon opened on Jun 14, 2026

ArrayIndexOutOfBoundsException using IpAddressMatcher 7.1

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#19329 In spring-projects/spring-security;

· winfriedgerlach opened on Jun 12, 2026

Pass BearerTokenAuthenticationToken#details to JwtAuthenticationConverter in addition to the JWT

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#19328 In spring-projects/spring-security;

· reda-alaoui opened on Jun 12, 2026

Dependency regression: cas-client-core 4.1.x in Spring Security 7.1.0 breaks Java 17 baseline compatibility

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#19325 In spring-projects/spring-security;

· jtruffot opened on Jun 12, 2026

ServletOAuth2AuthorizedClientExchangeFilterFunction doesn't obtain a token if no servlet request

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#19324 In spring-projects/spring-security;

· petergphillips opened on Jun 12, 2026

Ability to use AbstractAuthenticationFilterConfigurer for custom filters

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#19319 In spring-projects/spring-security;

· OrangeDog opened on Jun 11, 2026

Fix parametersConverters nullability in AbstractRestClientOAuth2AccessTokenResponseClient

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#19318 In spring-projects/spring-security;

· kalgon opened on Jun 10, 2026