Category "spring-security"

The dependencies in the application context form a cycle

The dependencies of some of the beans in the application context form a cycle: authController defined in file [...\AuthController.class] ↓ user

Check user role in Thymeleaf using Webflux security

I have a Spring Security 5 Reactive Applications using the "@EnableWebFluxSecurity" annotation.For my frontend I am using Thymeleaf.Now I have the problem that

Is it possible to require authentication on certain path, but not when certain request param is provided?

Controller: @GetMapping(path = "/new") public String method(@RequestParam(required = false) final String hash) { ... } Get request on /new without prov

Can i use two different tables for login in my spring boot application by spring security?

In my current project I have two separate entities. User :- TO authenticate users Customer :- To authenticate customers I'm confuse How will we manage log

How to configure Spring-Security AntPathRequestMatcher to case insensitive in XML configuration

We recently upgraded Spring-Security from 3.X to 5.6. Most of the issues we could iron out however one thing proves difficult. The problem was caused by a chang

InResponseToField error after Spring Session upgrade

We are not able to upgrade from Spring session 1.3.3 to 2.1.2 due to problems with Spring Security SAML. It seems that Spring Security SAML cannot verify the In

Spring Boot : CORS Issue

I am using Spring Boot version 2.0.2Release. Below is my security configuration @Configuration @EnableWebSecurity @EnableGlobalMethodSecurity( prePostE

Kafka authentication with Jaas config

I have set up my Kafka jaas config as an external bean in my spring boot application to read my configuration from my application.yaml file. But I am facing an

Getting error: 'Access-Control-Allow-Origin' header contains multiple values '*, *', but only one is allowed

I tried to make a connection between my Angular frontend and a REST Endpoint in Java / Spring (which I didn't developed and don't know so well). By GET, all wor

Authenticate certain endpoints with custom Filter | Spring Security [duplicate]

1. Overview First things first - I am pretty new to Spring Security so if you see something trivial, please keep that in mind 🤓 I am t

Spring Security Rejects Fetch OPTIONS Preflight Outright If content-type = 'application/json'

If a Fetch POST to a Spring Security (v 5.6.1) enabled service endpoint sends this header: headers.append("Content-Type", "application/json"); the OPTIONS pref

Sping security OpenSAML 4.1.1 artifacts not found

I have a maven multi module project where I'm using spring boot 2.6.4 and spring security in a saml2 scenario. As far as I know spring uses opensaml and more ex

Where is the documentation for removing Oauth from Spring Security? [closed]

I know OAuth is now supported by Spring Security, so I want to review the official documentation so that I know how to safely remove it from m

How to specify CryptoComply algorithm provider in new Spring SAML2?

Our identity provider uses keys and certificates in the BCFKS format. To use that format in key tool we specify the CryptoComply algorithm (not service) provid

username parameter is empty in loadUserByUsername(String username) - spring boot

This is my UserDetailService: public class StockUserDetailService implements UserDetailsService { @Autowired private UserRepository userRepository;

Howto disable signature verification in Spring Security SAML 5.6.1?

I'm currently migrating from old deprecated Spring Security SAML Extension 1.0.10 to the SAML implementation in Spring Security 5.6.1. In the old extension ther

How can I test the Remember Me checkbox

I am currently setting up a service allowing user login on a web portal, for comfort I have added the "Remember Me" function using Spring Security by using a pe

How to protect reactjs resources with spring boot based authentiation?

My current project state: I am working on a Web Application with ReactJs (frontend) and spring boot (backend). When I deploy this application, I package react

How to protect reactjs resources with spring boot based authentiation?

My current project state: I am working on a Web Application with ReactJs (frontend) and spring boot (backend). When I deploy this application, I package react

Handle Security exceptions in Spring Boot Resource Server

How can I get my custom ResponseEntityExceptionHandler or OAuth2ExceptionRenderer to handle Exceptions raised by Spring security on a pure resource server? We