-
Notifications
You must be signed in to change notification settings - Fork 6.2k
Pull requests: spring-projects/spring-security
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27
type: dependency-upgrade
A dependency upgrade
#18637
opened Feb 3, 2026 by
dependabot
bot
Loading…
Bump io.spring.nullability:io.spring.nullability.gradle.plugin from 0.0.10 to 0.0.11
type: dependency-upgrade
A dependency upgrade
#18636
opened Feb 3, 2026 by
dependabot
bot
Loading…
Fix typos in contributing guide
status: waiting-for-triage
An issue we've not yet triaged
#18635
opened Feb 3, 2026 by
coehgns
Loading…
Add InetAddressMatcher
in: web
An issue in web modules (web, webmvc)
type: enhancement
A general enhancement
#18634
opened Feb 2, 2026 by
rwinch
Loading…
Change An issue we've not yet triaged
ActiveDirectoryLdapAuthenticationProvider to use LdapClient
status: waiting-for-triage
#18627
opened Feb 1, 2026 by
therepanic
Loading…
Fix compiler warnings in spring-security-acl
in: acl
An issue in spring-security-acl
in: build
An issue in the build
type: enhancement
A general enhancement
Add An issue we've not yet triaged
authenticationConverter to SpringOpaqueTokenIntrospector Builders
status: waiting-for-triage
#18625
opened Jan 31, 2026 by
itsmevichu
Loading…
Fix session concurrency for OAuth2/OIDC authentication
status: waiting-for-triage
An issue we've not yet triaged
#18624
opened Jan 30, 2026 by
Gautam-aman
Loading…
Mark An issue we've not yet triaged
CsrfTokenRequestAttributeHandler#setCsrfRequestAttributeName as Nullable
status: waiting-for-triage
#18620
opened Jan 29, 2026 by
therepanic
Loading…
docs: Update inner link about CSRF in FAQ
status: waiting-for-triage
An issue we've not yet triaged
#18616
opened Jan 29, 2026 by
ghusta
Loading…
Document RegisteredClient.ClientSettings
in: oauth2
An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)
type: enhancement
A general enhancement
Fail spring-security-docs on javadoc warnings
in: build
An issue in the build
in: docs
An issue in Documentation or samples
type: enhancement
A general enhancement
Support single-line PEM encoded RSA keys in An issue we've not yet triaged
RsaKeyConverters
status: waiting-for-triage
#18599
opened Jan 27, 2026 by
earlgrey02
Loading…
Bump io.mockk:mockk from 1.14.7 to 1.14.9
type: dependency-upgrade
A dependency upgrade
#18598
opened Jan 27, 2026 by
dependabot
bot
Loading…
Fix compile warnings for spring-security-config
in: build
An issue in the build
in: config
An issue in spring-security-config
status: waiting-for-feedback
We need additional information before we can continue
type: enhancement
A general enhancement
Fix compile warning in spring-security-test
in: build
An issue in the build
in: test
An issue in spring-security-test
type: enhancement
A general enhancement
Lazily instantiate default components in WebAuthnConfigurer
status: waiting-for-triage
An issue we've not yet triaged
#18586
opened Jan 25, 2026 by
ryujungkyun
Loading…
Clarify behavior when multiple CorsConfigurationSource beans are present
status: waiting-for-triage
An issue we've not yet triaged
#18584
opened Jan 25, 2026 by
mjkang4416
Loading…
Gh 18561 fix jackson date override
status: waiting-for-triage
An issue we've not yet triaged
#18582
opened Jan 25, 2026 by
Khyojae
Loading…
Fix gh-18565: Support consent for clients with no registered scopes
status: waiting-for-triage
An issue we've not yet triaged
#18574
opened Jan 25, 2026 by
ryujungkyun
Loading…
Clarify need for method attribute in JSP authorize tag
status: waiting-for-triage
An issue we've not yet triaged
#18566
opened Jan 24, 2026 by
Hann244
Loading…
fix: replace hard-coded JWKS timeouts
status: waiting-for-triage
An issue we've not yet triaged
#18563
opened Jan 23, 2026 by
knoobie
Loading…
Deprecate BCrypt.gensalt() without SecureRandom parameter
status: waiting-for-triage
An issue we've not yet triaged
#18560
opened Jan 22, 2026 by
lreowy
Loading…
Add reactive handle method to ServerCsrfTokenRequestHandler
in: web
An issue in web modules (web, webmvc)
status: feedback-provided
Feedback has been provided
type: enhancement
A general enhancement
#18558
opened Jan 22, 2026 by
therepanic
Loading…
Fix NullPointerException in AuthoritiesAuthorizationManager
status: waiting-for-triage
An issue we've not yet triaged
#18544
opened Jan 21, 2026 by
Khyojae
Loading…
Previous Next
ProTip!
What’s not been updated in a month: updated:<2026-01-03.