micronaut-projects/micronaut-security

View on GitHub

The official Micronaut security solution

Stars: 179
Forks: 146
Open beginner issues: 0
Indexed issues: 80
Avg merge: 1d 17h
Merged PRs (30d): 16

Dominant language: Java
License: Apache-2.0
Last GitHub push: Sep 17, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

80 open issues indexed

Custom GenericJwtClaimsValidator beans run against the OpenID provider's ID token with the live callback request Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

micronaut-projects/micronaut-security#2362 · Opened Sep 17, 2026
CacheableJwksSetFetcher doesn't implement clear cache Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

micronaut-projects/micronaut-security#2361 · Opened Sep 17, 2026
Improve Error messages on OAuth verification Open

type: improvement

Difficulty 4/5 3-5 days Newbie friendliness 40/100

micronaut-projects/micronaut-security#2179 · 3 reactions · Opened Apr 21, 2026
the "Secure with Strava" guide has nothing to do with Strava Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

micronaut-projects/micronaut-security#2173 · Opened Apr 14, 2026
JwksCacheSpec is flaky Open

status: pr submitted type: bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

micronaut-projects/micronaut-security#2172 · Opened Apr 14, 2026
Cannot load JWKS from web URL with netty server Open

status: in progress type: bug

micronaut-projects/micronaut-security#2162 · 1 reaction · 1 assignee · Opened Apr 1, 2026
serialized oauth2 state may cause "Illegal base64 character" exception upon deserialization Open

status: in progress type: bug

micronaut-projects/micronaut-security#2160 · 1 comment · 1 assignee · Opened Mar 28, 2026
Spurious ERROR log "Operator called default onErrorDropped" with CancellationException when using multiple JWKS providers Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

micronaut-projects/micronaut-security#2143 · 3 reactions · Opened Mar 13, 2026
Reopen one of the "Resource Server/Opaque token introspection" issues/PRs Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

micronaut-projects/micronaut-security#2119 · Opened Jan 22, 2026
Improve www-authenticate default scopes Open

type: improvement

micronaut-projects/micronaut-security#2079 · 1 reaction · 1 assignee · Opened Dec 8, 2025
UpdatedBy annotation not auto populating when update(fields...) repository method used Open

closed: notabug type: docs

micronaut-projects/micronaut-security#2015 · 3 comments · 1 assignee · Opened Sep 11, 2025
@Secured annotation unintuitive when using expressions Open

status: in progress status: under consideration type: bug

micronaut-projects/micronaut-security#2012 · 1 assignee · Opened Sep 4, 2025
CsrfFilter called twice when CSRF token sent via HTML field, causing NullPointerException Open

status: example attached status: in progress type: bug

micronaut-projects/micronaut-security#1984 · 1 comment · 1 assignee · Opened Jun 18, 2025
Feature Request: Add Support for OAuth 2.0 DPoP (RFC 9449) Validation Open

type: enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

micronaut-projects/micronaut-security#1960 · 2 comments · Opened Apr 11, 2025
Micronaut SSL Configuration Not Accepting Custom PKCS12 Certificate Open

status: awaiting feedback

Difficulty 4/5 3-5 days Newbie friendliness 35/100

micronaut-projects/micronaut-security#1946 · 1 comment · Opened Mar 12, 2025
java.lang.NullPointerException: Cannot invoke "org.reactivestreams.Subscription.cancel()" because "this.upstream" is null Open

status: awaiting validation type: bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

micronaut-projects/micronaut-security#2281 · 9 comments · Opened Mar 3, 2025
Not able to use micronaut to login to AKHQ Open

status: awaiting feedback

Difficulty 4/5 3-5 days Newbie friendliness 25/100

micronaut-projects/micronaut-security#1886 · 5 comments · Opened Dec 5, 2024
Reactive LogoutHandler Open

type: enhancement

micronaut-projects/micronaut-security#1879 · 1 assignee · Opened Dec 2, 2024
No documentation on how to implement custom JWT validation Open

status: awaiting feedback type: docs

micronaut-projects/micronaut-security#1851 · 8 comments · 1 assignee · Opened Nov 7, 2024
Micronaut-security does not retry to retrieve openid-configuration from Keycloak if server is not found at startup Open

type: enhancement

Difficulty 4/5 3-5 days Newbie friendliness 38/100

micronaut-projects/micronaut-security#1797 · 2 comments · 1 reaction · Opened Sep 11, 2024
CustomValidator which implemented TokenValidator is not called Open

status: awaiting feedback

Difficulty 4/5 3-5 days Newbie friendliness 35/100

micronaut-projects/micronaut-security#1786 · 1 comment · Opened Sep 4, 2024
Can you enhance the oathController so that the refreshtoken can have a prefix Open

type: improvement

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

micronaut-projects/micronaut-security#1763 · Opened Aug 8, 2024
OAuth2 end session throwing error when no session Open

status: example attached type: bug

micronaut-projects/micronaut-security#1761 · 1 assignee · Opened Aug 3, 2024
JWTClaimsSetGenerator#generateClaims(Authentication authentication, @Nullable Integer expiration) overrides provided expiration with original exp claim Open

status: example attached type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

micronaut-projects/micronaut-security#1749 · Opened Jul 5, 2024
Multi-tenancy support Open

type: improvement

Difficulty 5/5 Over a week Newbie friendliness 25/100

micronaut-projects/micronaut-security#1744 · Opened Jun 25, 2024
Possibly misleading log in DefaultReactiveOpenIdTokenResponseValidator Open

type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 48/100

micronaut-projects/micronaut-security#1743 · Opened Jun 25, 2024
Missing authentication failed event publishing, skip of loginFailed logic Open

status: example attached type: bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

micronaut-projects/micronaut-security#1742 · Opened Jun 25, 2024
Multiple @CreatedBy does not register authenticated user in database Open

status: awaiting feedback type: bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

micronaut-projects/micronaut-security#1704 · 2 comments · Opened May 15, 2024
JwksSignature error when used from HttpServerFilter Open

closed: notabug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

micronaut-projects/micronaut-security#1680 · 3 comments · Opened Apr 25, 2024
Since Micronaut Security 4.6.8 route match is randomly null in the SecurityFilter Open

priority: high type: bug

micronaut-projects/micronaut-security#1683 · 32 comments · 2 assignees · Opened Apr 15, 2024
Non-reactive TokenValidator Open

type: enhancement

micronaut-projects/micronaut-security#1602 · 4 comments · 2 reactions · 1 assignee · Opened Feb 20, 2024
custom role claims in Id/Access tokens are missing in Micronaut generated JWTs Open

type: question

Difficulty 3/5 1-2 days Newbie friendliness 38/100

micronaut-projects/micronaut-security#1558 · 3 comments · Opened Jan 19, 2024
JWTs for Client Authentication Open

type: enhancement

micronaut-projects/micronaut-security#1511 · 1 assignee · Opened Nov 30, 2023
ExpressionEvaluationContextRegistrar cannot be resolved in simple JWT project Open

info: workaround available status: awaiting validation status: example attached type: bug

Difficulty 3/5 1-2 days Newbie friendliness 55/100

micronaut-projects/micronaut-security#2283 · 2 comments · 1 reaction · Opened Sep 15, 2023
DefaultAccessRefreshTokenGenerator#generateRefreshToken publish key instead of refresh token Open

type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 58/100

micronaut-projects/micronaut-security#1439 · Opened Sep 5, 2023
Subtypes of Authentication are not injected as expected Open

type: docs

Difficulty 4/5 3-5 days Newbie friendliness 38/100

micronaut-projects/micronaut-security#1430 · 4 comments · Opened Aug 30, 2023
Bypass signation JWT verification Open

status: awaiting feedback status: under consideration

Difficulty 5/5 Over a week Newbie friendliness 20/100

micronaut-projects/micronaut-security#1416 · 1 comment · Opened Aug 11, 2023
LDAP bind with just incoming username/pw Open

status: awaiting feedback

Difficulty 4/5 3-5 days Newbie friendliness 35/100

micronaut-projects/micronaut-security#1350 · 9 comments · Opened Jun 13, 2023
Security rules strategy execution not enough documented + SecurityRule strategy feature request Open

type: docs

micronaut-projects/micronaut-security#1305 · 6 comments · 1 assignee · Opened May 5, 2023
Get role from nested value in Authentication attributes map Open

info: workaround available status: under consideration

Difficulty 3/5 1-2 days Newbie friendliness 65/100

micronaut-projects/micronaut-security#1132 · 5 comments · 1 reaction · Opened Nov 10, 2022
SecurityService does not support coroutines Open

lang: kotlin status: awaiting feedback type: enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

micronaut-projects/micronaut-security#1090 · 3 comments · 2 reactions · Opened Sep 13, 2022
Oauth 2.0 password authentication does not work with openId configuration Open

type: bug

Difficulty 3/5 1-2 days Newbie friendliness 42/100

micronaut-projects/micronaut-security#1071 · Opened Aug 11, 2022
Support for OIDC "claims" Request Parameter Open

type: enhancement

Difficulty 4/5 3-5 days Newbie friendliness 42/100

micronaut-projects/micronaut-security#1058 · Opened Jul 22, 2022
Add support for User-Managed Access (UMA) 2.0 and Token Exchange Grant for OAuth 2.0 Authorization Open

type: enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

micronaut-projects/micronaut-security#1052 · 2 comments · 2 reactions · Opened Jul 12, 2022
Custom OpenIdAuthenticationMapper not working 3.5.x Open

status: awaiting feedback

Difficulty 3/5 1-2 days Newbie friendliness 35/100

micronaut-projects/micronaut-security#1043 · 5 comments · Opened Jun 22, 2022
Bean definition [io.micronaut.security.token.jwt.validator.JwtTokenValidator] could not be loaded Open

status: awaiting feedback

Difficulty 2/5 1-3 hours Newbie friendliness 50/100

micronaut-projects/micronaut-security#1034 · 3 comments · Opened Jun 7, 2022
Support OIDC back-channel logout Open

type: enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

micronaut-projects/micronaut-security#1023 · Opened May 25, 2022
Dependency Dashboard Open

Difficulty 5/5 Over a week Newbie friendliness 15/100

micronaut-projects/micronaut-security#994 · Opened May 2, 2022
Multiple Login Handlers Open

type: improvement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

micronaut-projects/micronaut-security#971 · 2 reactions · Opened Mar 29, 2022
Remove CookieBasedAuthenticationModeCondition from JwtCookieTokenReader Open

status: future consideration type: enhancement

micronaut-projects/micronaut-security#962 · 1 comment · 1 assignee · Opened Mar 18, 2022

micronaut-projects/micronaut-security

Get new issues in your inbox