Search results

Add Support for User Specific Factors

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#18962 In spring-projects/spring-security;

· rwinch opened on Mar 20, 2026

·  

7.1.0-RC1

Consider Exposing WebAuthnRegisteredPredicate

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#18961 In spring-projects/spring-security;

· rwinch opened on Mar 20, 2026

·  

7.1.0-RC1

Add AllRequiredFactorsAuthorizationManager.anyOf

in: coreAn issue in spring-security-coreAn issue in spring-security-core

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#18960 In spring-projects/spring-security;

· rwinch opened on Mar 20, 2026

·  

7.1.0-RC1

Potential NullPointerException when revoking refresh token if associated access token is missing

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#18935 In spring-projects/spring-security;

· assassion2 opened on Mar 18, 2026

OAuth2 Basic authentication decodes credentials twice causing ‘+’ to become space

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#18934 In spring-projects/spring-security;

· assassion2 opened on Mar 18, 2026

Missing session fixation protection for WebAuthn

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#18931 In spring-projects/spring-security;

· ziqin opened on Mar 18, 2026

All equals methods with jspecify support must have a Nullable argument

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#18929 In spring-projects/spring-security;

· therepanic opened on Mar 18, 2026

org.springframework.security.core.userdetails.User.equals should accept @Nullable parameter

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: bugA general bugA general bug

Status: Open.

#18927 In spring-projects/spring-security;

· npruehs opened on Mar 18, 2026

Use PreFlightRequestFilter

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Open.

#18926 In spring-projects/spring-security;

· rwinch opened on Mar 18, 2026

·  

7.2.x

Support Disabling MFA when the User has a Specified Authority

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#18925 In spring-projects/spring-security;

· rwinch opened on Mar 17, 2026

·  

7.1.0-RC1

Conditional MFA

type: enhancementA general enhancementA general enhancement

Status: Open.

#18924 In spring-projects/spring-security;

· rwinch opened on Mar 17, 2026

·  

7.1.0-RC1

Support MFA factor requirements like “WebAuthn ∨ (Password ∧ OTT)”

status: waiting-for-feedbackWe need additional information before we can continueWe need additional information before we can continue

type: enhancementA general enhancementA general enhancement

Status: Open.

#18918 In spring-projects/spring-security;

· ziqin opened on Mar 17, 2026