Category "spring-security"

Spring boot security, always redirects to login page, if navigate through address bar

I have a react project, and the security works fine untill I navigate within page - i.e. clicking buttons etc. But, if I refresh page, or input url directly int

Swagger UI being blocked by Spring Security

I am trying to implement spring security with JWT token, I am trying to achieve authentication with method level authorization My configuration looks like this

Customizing the TokenEndpoint in spring security OAuth2

I would like to customize how the TokenEndpoint works so that I can add additional parameters to to incoming /oauth/token rest call that I will capture and proc

Consider defining a bean of type 'org.springframework.security.oauth2.client.registration.ReactiveClientRegistrationRepository' in your configuration

I am using spring oAuthClient version 5.2.4.RELEASE By following the document link of spring security https://docs.spring.io/spring-security/site/docs/current

Getting 404 error in spring boot even though method is logging statements

My app uses Angular on the frontend and Spring Boot (w basic authentication & Spring security) on the backend. I'm using a proxy for api requests to my back

Authorization Header not getting displayed in CURL springdoc-openapi-ui

I am using the springdoc-openapi-ui. I have configured the global headers named Authorization. When I execute the API Authorization is not showing in the CURL o

CookieCsrfTokenRepository allows the client to create its own Csrf Tokens

CookieCsrfTokenRepository sets a cookie and on subsequent requests it just just compares the cookie value from the client with the cookie value from the header.

@EventListener for AuthenticationSuccessEvent or InteractiveAuthenticationSuccessEvent not fired

I have this listener in the context of Spring: package listeners; import java.util.Date; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.s

Spring Security: How to use a UserDetailsService with JwtAuthenticationProvider?

I have a REST service, written using Spring MVC. The server is an OAuth2 resource server and I am using the JwtAuthenticationProvider to have the JWT parsed and

AuthenticationSuccessEvent never fired

I writing app where user logs in using facebook. My security config/application class: @SpringBootApplication @EnableOAuth2Sso @ComponentScan(basePackages = {

spring sas 0.2.0 access_token throw 'Access is denied'

I have got the access_token from '/oauth2/token' endpoint. But when I query other custom endpoint with access_token, spring sas 0.2.0 throw 'Access is denied'.

How to return 404 for pages that do not exist when using Grails Spring Security Plugin

I'm using Grails 3.3.9 with the spring security core plugin 3.2.3 to secure a website. The problem I have is that now users receive a 403 for pages that do not