Repository navigation

All pull requests

Labels (57)Milestones (12)New pull request

Fix spurious ProviderManager failure event
#19957Yusuf-Hussien opened Oct 20, 2026
Document using Spring Security without a servlet request
#19944Yusuf-Hussien opened Oct 20, 2026
8
Fix KerberosRestTemplate failing successful calls that return no body
#19936Lyin-OTTF opened Oct 20, 2026
Bump io.micrometer:micrometer-bom from 1.18.0-M2 to 1.18.0-SNAPSHOT
#19934dependabot[bot] opened Oct 20, 2026Bot
Fix may_act iss claim comparison in token exchange
#19926marcusdacoregio opened Oct 17, 2026Contributor
Reject remember-me cookie with invalid URL encoding
#19925liotur opened Oct 17, 2026
Replace matcher explicitly in replace-CSP test for reactive stack
#19924ziqin opened Oct 17, 2026Contributor
Omit auth_time when authentication time is unknown
#19923mohitduhan19 opened Oct 16, 2026
Bump spring-io/spring-security-release-tools/.github/actions/send-notification from 1.0.20 to 1.0.21
#19920dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-release-actions/schedule-milestone from 0.0.7 to 0.0.8
#19919dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/workflows/deploy-artifacts.yml from 1.0.20 to 1.0.21
#19918dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/workflows/release-announcements-publish.yml from 1.0.20 to 1.0.21
#19917dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.20 to 1.0.21
#19916dependabot[bot] opened Oct 16, 2026Bot
Bump actions/upload-artifact from 7.0.1 to 7.0.2
#19915dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-release-actions/get-todays-release-version from 0.0.7 to 0.0.8
#19914dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/workflows/test.yml from 1.0.18 to 1.0.20
#19913dependabot[bot] opened Oct 16, 2026Bot
1
Bump spring-io/spring-security-release-tools/.github/workflows/release-announcements-publish.yml from 1.0.20 to 1.0.21
#19911dependabot[bot] opened Oct 16, 2026Bot
Bump spring-io/spring-security-release-tools/.github/actions/send-notification from 1.0.20 to 1.0.21
#19908dependabot[bot] opened Oct 16, 2026Bot 7.2.0-RC1
Reject malformed PKCE code_challenge values
#19890L00PLeGeNd opened Oct 15, 2026
Bump org.hibernate.orm:hibernate-core from 7.4.10.Final to 7.4.13.Final
#19888dependabot[bot] opened Oct 15, 2026Bot
Bump org.slf4j:slf4j-api from 2.0.19 to 2.0.20
#19887dependabot[bot] opened Oct 15, 2026Bot
Bump org-jetbrains-kotlin from 2.4.20 to 2.4.21
#19886dependabot[bot] opened Oct 15, 2026Bot
Bump ch.qos.logback:logback-classic from 1.6.3 to 1.6.5
#19885dependabot[bot] opened Oct 15, 2026Bot
Allow configurable DPoP Proof verifier for Authorization Server
#19882timpeeters opened Oct 14, 2026
Enable DPoP for Authorization Server protected endpoints
#19877timpeeters opened Oct 13, 2026