List view

Remove SecurityContextPersistenceFilter in Favor of Explicit Saves

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#9634 In spring-projects/spring-security;

· rwinch opened on Apr 13, 2021

Should OidcIdToken implement equals?

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#15156 In spring-projects/spring-security;

· MatthiasWinzeler opened on May 24, 2024

Consider Signing Metadata by Default

in: saml2An issue in SAML2 modulesAn issue in SAML2 modules

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Open.

#15182 In spring-projects/spring-security;

· jzheaux opened on May 31, 2024

Document Jackson 3 Migration

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Open.

#18078 In spring-projects/spring-security;

· rwinch opened on Oct 19, 2025

Authorization Server's OAuth2 Endpoints should validate MFA

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Open.

#18165 In spring-projects/spring-security;

· joaquinjsb opened on Nov 13, 2025