spring-projects / spring-projects/spring-security

Add native support for SAML 2.0

Open
#11,984 4 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

in: saml2 type: enhancement
Dominant language
Java
Stars
9.6k
Forks
6.3k
Avg merge
2d 11h
Merged PRs (30d)
52

Description

We should look into how to make the SAML 2.0 support native compatible. At first, it seems not viable for the Spring Security 6 GA since we are using the OpenSAML library and that library uses too many reflection making it very hard to add the necessary hints for an application to run without problems.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the existing Spring Security SAML 2.0 integration and how its OpenSAML dependency uses reflection. Determine the native-compatibility approach and whether the required hints can support applications without runtime problems; done means SAML 2.0 works natively despite the library constraints.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, spring
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.