Issues

• Slow authorization code lookup on MySQL with large oauth2_authorization table

  type: bug
  spring-attic/spring-authorization-server#2358 · Filter by author itanxiao opened on Aug 13, 2026

• OAuth2AuthorizationCodeRequestAuthenticationConverter parameters runtime hook

  type: enhancement
  spring-attic/spring-authorization-server#2342 · Filter by author deh-nine opened on Jun 9, 2026
  2

• OidcLogoutAuthenticationProvider fails with 400 on sid validation in a clustered Spring Authorization Server setup

  type: bug
  spring-attic/spring-authorization-server#2333 · Filter by author Karek-MA opened on May 13, 2026
  2

• How to support tls_client_auth when client send leaf certificate only in SAS

  type: bug
  spring-attic/spring-authorization-server#2332 · Filter by author ZuoJunLN opened on May 4, 2026

• org.springframework.security.oauth2.server.authorization.JdbcOAuth2AuthorizationService should support postgres DB as an implementation

  type: enhancement
  spring-attic/spring-authorization-server#2321 · Filter by author solidjb opened on Apr 8, 2026

• Make it possible to share configuration for OIDC and Auth server well-known endpoints

  type: enhancement
  spring-attic/spring-authorization-server#2225 · Filter by author symposion opened on Oct 22, 2025

• OAuth2AuthenticationProviderUtils.accessToken not respecting token_type

  type: enhancement
  spring-attic/spring-authorization-server#2210 · Filter by author lacebal opened on Oct 6, 2025
  5

• Update nimbus-jose-jwt

  type: dependency-upgrade
  spring-attic/spring-authorization-server#2204 · Filter by author florianberthe opened on Sep 26, 2025
  8

• Allow consent step to modify the stored OAuth2Authorization

  type: enhancement
  spring-attic/spring-authorization-server#2003 · Filter by author OrangeDog opened on May 7, 2025
  1

• Add CIBA support

  status: on-holdtype: enhancement
  spring-attic/spring-authorization-server#1938 · Filter by author franticticktick opened on Mar 19, 2025
  6

• Add client-certificate when fetching client-jwks

  type: enhancement
  spring-attic/spring-authorization-server#1788 · Filter by author edwinrozendom opened on Oct 24, 2024
  1

• Investigate providing personal access tokens

  type: task
  spring-attic/spring-authorization-server#1716 · Filter by author jgrandja opened on Sep 12, 2024
  

• How-to: Use Spring Cloud Gateway with Spring Authorization Server

  type: documentation
  spring-attic/spring-authorization-server#1687 · Filter by author sjohnr opened on Aug 6, 2024
  14

• Support transforming authorized scopes when the OAuth2Authorization object is created

  type: enhancement
  spring-attic/spring-authorization-server#1504 · Filter by author Kehrlann opened on Jan 12, 2024
  13

• Make CodeVerifierAuthenticator public

  type: enhancement
  spring-attic/spring-authorization-server#1352 · Filter by author Vojtech-Sassmann opened on Sep 5, 2023

• How-to: Authenticate using SAML

  type: documentation
  spring-attic/spring-authorization-server#1270 · Filter by author ramonmalcolm10 opened on Jun 17, 2023
  7

• Consider enhancing OAuth2Error with specific error codes

  type: enhancement
  spring-attic/spring-authorization-server#1240 · Filter by author Yneth opened on May 27, 2023
  4

• Allow OAuth2Authorization to be extensible

  type: enhancement
  spring-attic/spring-authorization-server#1238 · Filter by author Chr3is opened on May 26, 2023
  5

• Support OpenID Connect Front-Channel Logout

  status: on-holdtype: enhancement
  spring-attic/spring-authorization-server#1201 · Filter by author Scarange opened on May 7, 2023
  2

• How-to: Override default algorithm used to sign Jwt

  type: documentation
  spring-attic/spring-authorization-server#1030 · Filter by author sapradhan opened on Jan 2, 2023
  6

• Simplify adding an authentication validator

  type: enhancement
  spring-attic/spring-authorization-server#1003 · Filter by author dlehammer opened on Dec 13, 2022
  8

• How-to: Authenticate a client using the private_key_jwt method

  type: documentation
  spring-attic/spring-authorization-server#781 · Filter by author jgrandja opened on Jun 13, 2022

• How-to: Use Spring Authorization server behind Spring Cloud Gateway

  type: documentation
  spring-attic/spring-authorization-server#564 · Filter by author rcbandit111 opened on Jan 2, 2022
  32

• How-to: Provide a JWK source backed by a key rotation strategy

  type: documentation
  spring-attic/spring-authorization-server#544 · Filter by author jgrandja opened on Dec 17, 2021
  3

• How-to: Deny access for a revoked JWT access token

  type: documentation
  spring-attic/spring-authorization-server#543 · Filter by author jgrandja opened on Dec 17, 2021
  4