Questions tagged [spring-security-6]
10 questions
3
votes
1 answer
Using two or more SecurityFilterChains with Spring Security 6 does not work properly, only one chain is invoked
I have trouble to get my two SecurityFilterhains work in conjunction with each other using Spring Security 6.
For one of my endpoint paths (/v1/transactions/**) I want the user to authorize with Oauth2 and for the other endpoint path (/v1/info)…

Rox
- 2,647
- 15
- 50
- 85
0
votes
0 answers
How to allow Spring Security 6 to permit general ressources (static, images, etc...)
I'm on Spring Security 6, and having a trouble when rending pages:
as I'm using Thymeleaf, the static repertory isn't allowed.
This is my filter
@Bean
public SecurityFilterChain securityFilterChain(HttpSecurity httpSecurity) throws…

Sany
- 27
- 4
0
votes
1 answer
AccessDeniedException when accessing REST API that returns StreamingResponseBody in Spring Boot 3 and latest Spring Security?
I have created this api for streaming an mp3 audio file as response.
@GetMapping (value = "/api/user/stream/{songId}", produces = MediaType.APPLICATION_OCTET_STREAM_VALUE)
public ResponseEntity playSong(@PathVariable Long…

Kalpadiptya Roy
- 95
- 1
- 11
0
votes
0 answers
spring-security 6.0 migration - How to configure AuthenticationManager
I am migrating a project from spring boot 2.8 to spring boot 3. We used the code below to configure AuthentiationManagerBuilder in previous version. We cannot use configure method anymore because WebSecurityConfigurerAdapter has been removed in…

Ken
- 1
0
votes
0 answers
How to bundle a OAuth2 client server together with a Spring Authorization Server?
I found some examples at https://github.com/spring-projects/spring-security-samples/tree/main/servlet/spring-boot/java/oauth2 here, but they are using the Spring Authorization Server to implement a standalone auth server and using a standalone…

DevDengChao
- 198
- 15
0
votes
1 answer
Correct the classpath of your application so that it contains compatible versions of the classes TomcatWebServerFactoryCustomizer
I have included tomcat in my pom
...
org.apache.tomcat.embed
tomcat-embed-core
8.5.32
and…

banan3'14
- 3,810
- 3
- 24
- 47
0
votes
2 answers
Spring Security 6 ignore security configuration from dependency
I am migrating from Spring Security 5.7.x to 6.1.0. After fixing all the javax -> jakarta and remove WebSecurityConfigurerAdapter and added the security configuration from the dependency. And now it seems like my main project is ignoring the…

infD
- 43
- 7
0
votes
0 answers
How to JWE encode my jwt response token in new Spring authorization Server
I have a requirement of updating our previous authorization server based on spring 2.6 to spring security 6 and spring 3+, and have decided to go with the new spring authorization server. Have customized the configurations according to our need…

Abhishek Mishra
- 19
- 3
0
votes
1 answer
How can I use an Angular login instead of Spring Security's login for my OAuth2 server?
I have a microservices architecture with Spring Boot 3 and Spring Security 6, Java 17.
I have implemented an OAuth2 server for authentication and authorization of the application, which I have hooked up to the API gateway.
The integration is ready,…

Carlos C.M
- 3
- 2
0
votes
1 answer
Spring Security 6 accessing public URLs issue
I am using spring version 3.0.5 and spring security version 6.0.2, facing a issue to access the public urls which I configured through SecurityFilterChain, I am using spring MVC. The AppConfig class is below
package com.test.config;
import…

Mahesh Kumar
- 1
- 2