OidcBackChannelLogoutWebFilter make use of a servlet class #17125
Labels
Comments
Dyskal
added
status: waiting-for-triage
therepanic
added a commit
to therepanic/spring-security
that referenced
this issue
May 16, 2025
…lters (spring-projects#17125) Signed-off-by: Andrey Litvitski <[email protected]>
therepanic
added a commit
to therepanic/spring-security
that referenced
this issue
May 16, 2025
…filters (spring-projects#17125) Signed-off-by: Andrey Litvitski <[email protected]>
therepanic
added a commit
to therepanic/spring-security
that referenced
this issue
May 16, 2025
…filters (spring-projects#17125) Signed-off-by: Andrey Litvitski <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the bug
The OidcBackChannelLogoutWebFilter class make use of an undefined status code when the project doesn't have spring-webmvc, and only spring-webflux on its classpath.
spring-security/config/src/main/java/org/springframework/security/config/web/server/OidcBackChannelLogoutWebFilter.java
Line 21 in 07a50b4
spring-security/config/src/main/java/org/springframework/security/config/web/server/OidcBackChannelLogoutWebFilter.java
Line 111 in 07a50b4
Expected behavior
The class should make use of https://github.com/spring-projects/spring-framework/blob/bd83fb7021cab948dea1fee4a65e560a5bb4b4c0/spring-web/src/main/java/org/springframework/http/HttpStatus.java#L157 instead, with
exchange.getResponse().setStatusCode(HttpStatus.BAD_REQUEST);.The text was updated successfully, but these errors were encountered: