Questions tagged [spring-security-6]

10 questions
3
votes
1 answer

Using two or more SecurityFilterChains with Spring Security 6 does not work properly, only one chain is invoked

I have trouble to get my two SecurityFilterhains work in conjunction with each other using Spring Security 6. For one of my endpoint paths (/v1/transactions/**) I want the user to authorize with Oauth2 and for the other endpoint path (/v1/info)…
Rox
  • 2,647
  • 15
  • 50
  • 85
0
votes
0 answers

How to allow Spring Security 6 to permit general ressources (static, images, etc...)

I'm on Spring Security 6, and having a trouble when rending pages: as I'm using Thymeleaf, the static repertory isn't allowed. This is my filter @Bean public SecurityFilterChain securityFilterChain(HttpSecurity httpSecurity) throws…
Sany
  • 27
  • 4
0
votes
1 answer

AccessDeniedException when accessing REST API that returns StreamingResponseBody in Spring Boot 3 and latest Spring Security?

I have created this api for streaming an mp3 audio file as response. @GetMapping (value = "/api/user/stream/{songId}", produces = MediaType.APPLICATION_OCTET_STREAM_VALUE) public ResponseEntity playSong(@PathVariable Long…
0
votes
0 answers

spring-security 6.0 migration - How to configure AuthenticationManager

I am migrating a project from spring boot 2.8 to spring boot 3. We used the code below to configure AuthentiationManagerBuilder in previous version. We cannot use configure method anymore because WebSecurityConfigurerAdapter has been removed in…
0
votes
0 answers

How to bundle a OAuth2 client server together with a Spring Authorization Server?

I found some examples at https://github.com/spring-projects/spring-security-samples/tree/main/servlet/spring-boot/java/oauth2 here, but they are using the Spring Authorization Server to implement a standalone auth server and using a standalone…
0
votes
1 answer

Correct the classpath of your application so that it contains compatible versions of the classes TomcatWebServerFactoryCustomizer

I have included tomcat in my pom ... org.apache.tomcat.embed tomcat-embed-core 8.5.32 and…
banan3'14
  • 3,810
  • 3
  • 24
  • 47
0
votes
2 answers

Spring Security 6 ignore security configuration from dependency

I am migrating from Spring Security 5.7.x to 6.1.0. After fixing all the javax -> jakarta and remove WebSecurityConfigurerAdapter and added the security configuration from the dependency. And now it seems like my main project is ignoring the…
0
votes
0 answers

How to JWE encode my jwt response token in new Spring authorization Server

I have a requirement of updating our previous authorization server based on spring 2.6 to spring security 6 and spring 3+, and have decided to go with the new spring authorization server. Have customized the configurations according to our need…
0
votes
1 answer

How can I use an Angular login instead of Spring Security's login for my OAuth2 server?

I have a microservices architecture with Spring Boot 3 and Spring Security 6, Java 17. I have implemented an OAuth2 server for authentication and authorization of the application, which I have hooked up to the API gateway. The integration is ready,…
0
votes
1 answer

Spring Security 6 accessing public URLs issue

I am using spring version 3.0.5 and spring security version 6.0.2, facing a issue to access the public urls which I configured through SecurityFilterChain, I am using spring MVC. The AppConfig class is below package com.test.config; import…