List view

Provide ability to customize HTTP client in ClientRegistrations and JwtDecoders

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open.

#19014 In spring-projects/spring-security;

· jgrandja opened on Apr 1, 2026

Update snapshots to Spring Framework 7.+

in: buildAn issue in the buildAn issue in the build

type: enhancementA general enhancementA general enhancement

Status: Open.

#19026 In spring-projects/spring-security;

· jgrandja opened on Apr 2, 2026

Deprecate usages of RestTemplate and Provide Alternative (e.g. RestClient)

in: webAn issue in web modules (web, webmvc)An issue in web modules (web, webmvc)

type: enhancementA general enhancementA general enhancement

Status: Open.

#19027 In spring-projects/spring-security;

· jgrandja opened on Apr 2, 2026

Add Kotlin DSL for OAuth Authorization Server configuration

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 18150

#18150 In spring-projects/spring-security;

· mehrdadbozorgmehr opened on Nov 7, 2025

Null safety via JSpecify spring-security-config

in: configAn issue in spring-security-configAn issue in spring-security-config

type: enhancementA general enhancementA general enhancement

Status: Open.

#18399 In spring-projects/spring-security;

· rwinch opened on Jan 7, 2026

Add request validator for refresh token grant

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 18098

#18098 In spring-projects/spring-security;

· therepanic opened on Oct 22, 2025

Add ID token support for token exchange

in: oauth2An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose)

type: enhancementA general enhancementA general enhancement

Status: Open (in progress).

spring-projects/spring-securitynumber 19076

#19076 In spring-projects/spring-security;

· bkoragan opened on Apr 15, 2026

Migrate JDBC PersistentToken Support

type: enhancementA general enhancementA general enhancement

Status: Open.

#18982 In spring-projects/spring-security;

· jzheaux opened on Mar 25, 2026

Null safety via JSpecify

type: enhancementA general enhancementA general enhancement

type: themeAn issue that describes a theme for a releaseAn issue that describes a theme for a release

Status: Open.

#16882 In spring-projects/spring-security;

· rwinch opened on Apr 4, 2025

Conditional MFA

type: enhancementA general enhancementA general enhancement

Status: Open.

#18924 In spring-projects/spring-security;

· rwinch opened on Mar 17, 2026

Support Disabling MFA when the User has a Specified Authority

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#18925 In spring-projects/spring-security;

· rwinch opened on Mar 17, 2026

Consider Exposing WebAuthnRegisteredPredicate

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#18961 In spring-projects/spring-security;

· rwinch opened on Mar 20, 2026

Add Support for User Specific Factors

status: waiting-for-triageAn issue we've not yet triagedAn issue we've not yet triaged

type: enhancementA general enhancementA general enhancement

Status: Open.

#18962 In spring-projects/spring-security;

· rwinch opened on Mar 20, 2026