-
**Expected Behavior**
We are using an IDP that sends back-channel logout request with a token type set as `logout+jwt` which should be accepted by spring-security when using spring-webflux.
**Curr…
-
-
Related to https://github.com/spring-projects/spring-security/issues/15467
It may be possible to configure Spring Authorization Server to return a JWT as part of the introspection endpoint. Given t…
-
🔹 feature: Implementar configurações Spring Security com JWT
-
# Spring Security: Authentication using JWT
Spring Security: Authentication using JWT
[https://whowrotethisshit.vercel.app/spring-security-authentication-using-jwt](https://whowrotethisshit.vercel.a…
-
**Expected Behavior**
when this is used:
```java
@Bean
SecurityFilterChain configure(HttpSecurity http, AuthorizationManager authz)
throws Exception {
http.oauth2Resour…
-
현재 access token만 생성됨
refresh token 추가하여 access token 만료시간 줄여서 보안 강화
- [ ] refresh token 추가
- [ ] CustomAuthenticationEntryPoint class 수정
-
-
Vulnerable Library - spring-boot-starter-oauth2-client-3.1.5.jar
Path to dependency file: /pom.xml
Path to vulnerable library: /home/wss-scanner/.m2/repository/org/springframework/security/spring-s…
-
로그인, 로그아웃, 세션 기능 설정
경로, 요청 별 차단기능