1 Pull request merged by 1 person

• Remove AbstractConfiguredSecurityBuilder apply method

  #17498 merged Jul 11, 2025

5 Pull requests opened by 5 people

• Fix securityContextRepository() initialization in oauth2Login() DSL

  #17502 opened Jul 9, 2025

• Remove shouldFilterAllDispatcherTypes

  #17505 opened Jul 10, 2025

• Add disable DSL for RequestCache

  #17506 opened Jul 10, 2025

• PKCE configuration - enabled by default

  #17507 opened Jul 10, 2025

• Address Incorrect scope map fix in Reactive service

  #17511 opened Jul 11, 2025

11 Issues closed by 1 person

• Remove AbstractConfiguredSecurityBuilder#apply

  #13441 closed Jul 11, 2025

• Remove shouldFilterAllDispatcherTypes

  #12139 closed Jul 11, 2025

• Add 7.0 Migration Steps for Messaging PathPattern Usage

  #17509 closed Jul 10, 2025

• Remove usage of PathMatcher in messaging

  #17501 closed Jul 10, 2025

• Websocket XML config should pick up PathPatternMessageMatcher.Builder

  #17508 closed Jul 10, 2025

• Remove deprecations from CookieCsrfTokenRepository

  #14132 closed Jul 10, 2025

• Remove `authorizeRequests`

  #15174 closed Jul 9, 2025

• Simplify Expression Migration for authorizeRequests

  #17504 closed Jul 9, 2025

• Support Filtering Events in SpringAuthorizationEventPublisher

  #17503 closed Jul 9, 2025

• Remove no-version Open SAML implementations

  #17306 closed Jul 9, 2025

• Remove LazyCsrfTokenRepository

  #13196 closed Jul 9, 2025

8 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• IpAddressMatcher allows hostnames

  #17499 commented on Jul 9, 2025 • 0 new comments

• oauth2Login DSL fails when passing a `SecurityContextRepository`

  #16623 commented on Jul 9, 2025 • 0 new comments

• JwtIssuerValidator default ports not match

  #17187 commented on Jul 10, 2025 • 0 new comments

• WebSecurity.ignoring().anyRequest() no longer works

  #17155 commented on Jul 10, 2025 • 0 new comments

• Consider Enabling PKCE for Authorization Code by Default

  #16391 commented on Jul 10, 2025 • 0 new comments

• Remove Deprecations

  #13068 commented on Jul 11, 2025 • 0 new comments

• Document Upgrading Password Encoding

  #17120 commented on Jul 11, 2025 • 0 new comments

• Make stricter IP format check in `IpAddressMatcher`

  #17500 commented on Jul 9, 2025 • 0 new comments