# \#spring-security **URL:** https://community.auth0.com/tag/spring-security/702.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Session timeout using spring boot webapp](https://community.auth0.com/t/session-timeout-using-spring-boot-webapp/86330)
**Author:** [@guy.hillel](https://community.auth0.com/u/guy.hillel)\ **Replies:** 1\ **Last updated:** [February 18, 2025, 5:44pm UTC](https://community.auth0.com/t/session-timeout-using-spring-boot-webapp/86330 "2025-02-18T17:44:03Z")
Hi Auth0 community I’ve followed this spring boot quickstart and my webapp is now working with my Auth0 tenant using universal login. I want to apply a session timeout of 15 minutes and force idle users to log in again… --- ## [JWT decode issue in Spring Boot](https://community.auth0.com/t/jwt-decode-issue-in-spring-boot/89851)
**Author:** [@hantsy](https://community.auth0.com/u/hantsy)\ **Replies:** 2\ **Last updated:** [November 1, 2024, 4:12pm UTC](https://community.auth0.com/t/jwt-decode-issue-in-spring-boot/89851 "2024-11-01T16:12:10Z")
In my spring Boot (2.7.3) application, I used Auth0/Spring Security to protect our backend APIs, but we encountered an exception like this when deploying into our staging environment. 2022-09-01 11:29:33.096 DEBUG 1 ---… --- ## [Protected API allows GET requests through](https://community.auth0.com/t/protected-api-allows-get-requests-through/77470)
**Author:** [@samu-magaz](https://community.auth0.com/u/samu-magaz)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 9:53pm UTC](https://community.auth0.com/t/protected-api-allows-get-requests-through/77470 "2022-02-22T21:53:28Z")
Hey everyone, I’m using Auth0 for the first time for my master’s thesis. I’m developing a classic web application with frontend and backend, but I’m having some issues with the back. I’m trying to protect the access to… --- ## [How to change user context.riskAssessment in spring boot](https://community.auth0.com/t/how-to-change-user-context-riskassessment-in-spring-boot/64793)
**Author:** [@fatisamine](https://community.auth0.com/u/fatisamine)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 1:01pm UTC](https://community.auth0.com/t/how-to-change-user-context-riskassessment-in-spring-boot/64793 "2021-06-22T13:01:00Z")
Hi, How can I change the user context risk Assessment in spring boot? --- ## [Spring security does not accept "at+jwt"](https://community.auth0.com/t/spring-security-does-not-accept-at-jwt/52965)
**Author:** [@skyep29](https://community.auth0.com/u/skyep29)\ **Replies:** 0\ **Last updated:** [November 10, 2020, 6:45am UTC](https://community.auth0.com/t/spring-security-does-not-accept-at-jwt/52965 "2020-11-10T06:45:21Z")
Good day, I’m using spring-security-jwt release 1.1.1. When I try to decode an access token, it fails in the class below, as it expects “JWT”, but gets “at+jwt”. Does anyone know how I can get it to accept the “at+jwt” t… --- ## [How to parse roles put in custom claims in Spring Security?](https://community.auth0.com/t/how-to-parse-roles-put-in-custom-claims-in-spring-security/46801)
**Author:** [@mli](https://community.auth0.com/u/mli)\ **Replies:** 1\ **Last updated:** [July 28, 2020, 5:06pm UTC](https://community.auth0.com/t/how-to-parse-roles-put-in-custom-claims-in-spring-security/46801 "2020-07-28T17:06:58Z")
Hi there, I’m using the Authorization extension and I created a rule to put the groups and roles of a user into a custom claim in the access token for my API, under “\[namespace\]/groups” and “\[namespace\]/roles” respective… --- ## [Scope jwt token with SpringBoot](https://community.auth0.com/t/scope-jwt-token-with-springboot/44809)
**Author:** [@kmaeng](https://community.auth0.com/u/kmaeng)\ **Replies:** 2\ **Last updated:** [June 17, 2020, 12:03pm UTC](https://community.auth0.com/t/scope-jwt-token-with-springboot/44809 "2020-06-17T12:03:51Z")
Hi, I’m an newbie. I’m trying to test authorization with SpringBoot. I followed up this example(Java Springboot API - Auth0 Docs). But there is some issue that I can’t find scope values with ‘read:messages’. I can se… --- ## [Role with Spring security](https://community.auth0.com/t/role-with-spring-security/44824)
**Author:** [@kmaeng](https://community.auth0.com/u/kmaeng)\ **Replies:** 0\ **Last updated:** [June 17, 2020, 10:47am UTC](https://community.auth0.com/t/role-with-spring-security/44824 "2020-06-17T10:47:36Z")
Hi, All. I wanted to add “role” claim to access token but it’s not possible. I can use custom namespace with the role claim. So…how can I configure “hasRole” method in Spring Security if the token value is ‘http://exa… --- ## [Testing a secure SpringBoot controller using @WebMvcTest](https://community.auth0.com/t/testing-a-secure-springboot-controller-using-webmvctest/9182)
**Author:** [@bradmac](https://community.auth0.com/u/bradmac)\ **Replies:** 1\ **Last updated:** [December 14, 2018, 5:43pm UTC](https://community.auth0.com/t/testing-a-secure-springboot-controller-using-webmvctest/9182 "2018-12-14T17:43:08Z")
Does anyone have any guidance or an example on how to create a working @WebMvcTest for a Spring Boot application that’s secured using Auth0? (that doesn’t actually grab a token from auth0) --- ## [Auth0 Spring Security API ProviderNotFoundException when using @PreAuthorize](https://community.auth0.com/t/auth0-spring-security-api-providernotfoundexception-when-using-preauthorize/7553)
**Author:** [@auth06](https://community.auth0.com/u/auth06)\ **Replies:** 1\ **Last updated:** [December 28, 2017, 1:51am UTC](https://community.auth0.com/t/auth0-spring-security-api-providernotfoundexception-when-using-preauthorize/7553 "2017-12-28T01:51:07Z")
I am having problem using the @PreAuthorize annotation for my endpoints after following the Auth0 Spring Security for API quickstart guide. The response i get is: "status": 401, "error": "Unauthorized", "exception":"… --- ## [Spring Boot Vaadin Auth0 Widget](https://community.auth0.com/t/spring-boot-vaadin-auth0-widget/8942)
**Author:** [@jayemtraining](https://community.auth0.com/u/jayemtraining)\ **Replies:** 3\ **Last updated:** [December 18, 2017, 3:56pm UTC](https://community.auth0.com/t/spring-boot-vaadin-auth0-widget/8942 "2017-12-18T15:56:01Z")
I’m developing a new product and I’d love to be able to provide a nice authentication experience that can provide all the features that I’m sure I’ll be asked for such as MFS, SSO, Strong Passwords, the list goes on. I … --- ## [Client token in server authentication flow](https://community.auth0.com/t/client-token-in-server-authentication-flow/8773)
**Author:** [@peavers](https://community.auth0.com/u/peavers)\ **Replies:** 1\ **Last updated:** [November 20, 2017, 7:42pm UTC](https://community.auth0.com/t/client-token-in-server-authentication-flow/8773 "2017-11-20T19:42:55Z")
Hello, I’m having issues authenticating my backend with the token I receive from Auth0 in my front end client. Using emberjs-simple-auth-auth0 I correct receive a token and authenticate on the frontend. However using t… --- ## [Spring security webflux and Auth0](https://community.auth0.com/t/spring-security-webflux-and-auth0/8405)
**Author:** [@sebastien](https://community.auth0.com/u/sebastien)\ **Replies:** 1\ **Last updated:** [October 20, 2017, 12:38am UTC](https://community.auth0.com/t/spring-security-webflux-and-auth0/8405 "2017-10-20T00:38:55Z")
Are there any plans to support spring-security-webflux along with its own HttpSecurity setup ? Currently only spring-security-web is supported. I created pull request #42 to GitHub - auth0/auth0-spring-security-api: Spr… --- ## [Auth0 with grails 2.4.5 for spring security api](https://community.auth0.com/t/auth0-with-grails-2-4-5-for-spring-security-api/7904)
**Author:** [@pascurra](https://community.auth0.com/u/pascurra)\ **Replies:** 7\ **Last updated:** [August 24, 2017, 10:44pm UTC](https://community.auth0.com/t/auth0-with-grails-2-4-5-for-spring-security-api/7904 "2017-08-24T22:44:36Z")
Hi, I have created an empty grails 2.4.5 web project and added the auth0 libraries to integrate the web application. That part was working properly. Then I added the Spring Security API dependencies following this manu… --- ## [Cant find the java-spring-security-mvc/06-rules example](https://community.auth0.com/t/cant-find-the-java-spring-security-mvc-06-rules-example/7850)
**Author:** [@max.critical.path.te](https://community.auth0.com/u/max.critical.path.te)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 5:32pm UTC](https://community.auth0.com/t/cant-find-the-java-spring-security-mvc-06-rules-example/7850 "2017-08-16T17:32:45Z")
I am trying to access https://auth0.com/docs/quickstart/webapp/java-spring-security-mvc/06-rules has this moved, been taken down or replaced ? --- ## [Trouble with Grails 3 spring security sample](https://community.auth0.com/t/trouble-with-grails-3-spring-security-sample/7598)
**Author:** [@sebastien.arbogast](https://community.auth0.com/u/sebastien.arbogast)\ **Replies:** 0\ **Last updated:** [July 20, 2017, 5:25pm UTC](https://community.auth0.com/t/trouble-with-grails-3-spring-security-sample/7598 "2017-07-20T17:25:28Z")
Hello, I’m desperately trying to get the Grails 3 spring security sample to work, but apparently some things changed in your API and the sample is out-of-date. When I follow all the instructions in the README, I get thi… --- ## [Authorization Extension - Roles - Problem](https://community.auth0.com/t/authorization-extension-roles-problem/7575)
**Author:** [@Lisandro\_Rezoagli](https://community.auth0.com/u/Lisandro_Rezoagli)\ **Replies:** 1\ **Last updated:** [July 19, 2017, 3:20pm UTC](https://community.auth0.com/t/authorization-extension-roles-problem/7575 "2017-07-19T15:20:52Z")
I describe the case. All users are users of google. In my frontend, I’m using angular-auth0. Example: angularAuth0Provider.init({ clientID:AUTH0\_CLIENT\_ID, domain: .AUTH0\_DOMAIN, responseTy…