List view

Remove classes from old locations

in: coreAn issue in spring-security-coreAn issue in spring-security-core

status: duplicateA duplicate of another issueA duplicate of another issue

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17309 In spring-projects/spring-security;

· by jzheaux was closed on Jun 24, 2025

Remove Nimbus(Reactive)OpaqueTokenIntrospector

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

status: duplicateA duplicate of another issueA duplicate of another issue

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17302 In spring-projects/spring-security;

· by jzheaux was closed on Jun 24, 2025

Remove RequestVariablesExtractor in favor of RequestMatcher#matcher

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17308 In spring-projects/spring-security;

· by jzheaux was closed on Jul 3, 2025

Remove deprecated elements using AuthorizationDecision

in: coreAn issue in spring-security-coreAn issue in spring-security-core

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: enhancementA general enhancementA general enhancement

Status: Closed (completed).

#17299 In spring-projects/spring-security;

· by jzheaux was closed on Jul 3, 2025

Exceptions for Authorized Objects should propagate when returned from a Controller

Status: Closed (completed).

#16058 In spring-projects/spring-security;

· by jzheaux was closed on May 23, 2025

<websocket-message-broker> should use XorCsrfChannelInterceptor by default

in: configAn issue in spring-security-configAn issue in spring-security-config

in: messagingAn issue in spring-security-messagingAn issue in spring-security-messaging

status: ideal-for-contributionAn issue that we actively are looking for someone to help us withAn issue that we actively are looking for someone to help us with

type: breaks-passivityA change that breaks passivity with the previous releaseA change that breaks passivity with the previous release

type: bugA general bugA general bug

Status: Closed (completed).

#17260 In spring-projects/spring-security;

· by msqr was closed on Jul 7, 2025