List view

GenerateOneTimeTokenFilter should not attempt to generate a token with a null token request

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Closed (completed).

#18088 In spring-projects/spring-security;

· by jzheaux was closed on Oct 20, 2025

Default WebAuthnConfigurer#rpName to rpId

in: configAn issue in spring-security-configAn issue in spring-security-config

in: webauthnWebAuthn and PasskeysWebAuthn and Passkeys

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#18131 In spring-projects/spring-security;

· by rwinch was closed on Nov 4, 2025

Document effects of disabling CORS

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#18129 In spring-projects/spring-security;

· by rwinch was closed on Nov 4, 2025

BCryptPasswordEncoderTests should password limit of 72 bytes

in: cryptoAn issue in spring-security-cryptoAn issue in spring-security-crypto

status: forward-portAn issue tracking the forward-port of a change made in an earlier branchAn issue tracking the forward-port of a change made in an earlier branch

type: bugA general bugA general bug

Status: Closed (completed).

#18136 In spring-projects/spring-security;

· by jzheaux was closed on Nov 4, 2025

Fix GenerateOneTimeTokenRequestResolver ignored if username param not present

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 18074

#18074 In spring-projects/spring-security;

· by marcusdacoregio was closed on Oct 20, 2025

Add Include-Code for the Password Storage page

in: docsAn issue in Documentation or samplesAn issue in Documentation or samples

type: enhancementA general enhancementA general enhancement

Status: Merged (completed).

spring-projects/spring-securitynumber 18054

#18054 In spring-projects/spring-security;

· by himanshu-pareek was closed on Oct 20, 2025

<code>typ</code> values should not be case-sensitive in <code>JwtTypeValidator</code>

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: bugA general bugA general bug

Status: Merged (completed).

spring-projects/spring-securitynumber 18101

#18101 In spring-projects/spring-security;

· by namest504 was closed on Oct 28, 2025