Skip to content

Jackson Deserialization Issue with spring 5.5 #15952

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
TeamOussama opened this issue Oct 18, 2024 · 1 comment
Closed

Jackson Deserialization Issue with spring 5.5 #15952

TeamOussama opened this issue Oct 18, 2024 · 1 comment
Assignees
Labels
for: stackoverflow A question that's better suited to stackoverflow.com in: core An issue in spring-security-core

Comments

@TeamOussama
Copy link

I integrated redis with spring session and spring security 5.5.4 and respected the

An error has occurred
Could not read JSON: The class with org.springframework.security.web.savedrequest.DefaultSavedRequest and name of org.springframework.security.web.savedrequest.DefaultSavedRequest is not in the allowlist. If you believe this class is safe to deserialize, please provide an explicit mapping using Jackson annotations or by providing a Mixin. If the serialization is only done by a trusted source, you can also enable default typing. See #4370 for details; nested exception is java.lang.IllegalArgumentException: The class with org.springframework.security.web.savedrequest.DefaultSavedRequest and name of org.springframework.security.web.savedrequest.DefaultSavedRequest is not in the allowlist. If you believe this class is safe to deserialize, please provide an explicit mapping using Jackson annotations or by providing a Mixin. If the serialization is only done by a trusted source, you can also enable default typing. See #4370 for details

The same issue as :
#8373

@TeamOussama TeamOussama added status: waiting-for-triage An issue we've not yet triaged type: bug A general bug labels Oct 18, 2024
@jzheaux
Copy link
Contributor

jzheaux commented Oct 23, 2024

Thanks for getting in touch, @TeamOussama! It feels like this is a question that would be better suited to Stack Overflow. We prefer to use GitHub issues only for bugs and enhancements. Feel free to update this issue with a link to the re-posted question (so that other people can find it) or add more detail if you feel this is a genuine bug.

@jzheaux jzheaux closed this as completed Oct 23, 2024
@jzheaux jzheaux added in: core An issue in spring-security-core for: stackoverflow A question that's better suited to stackoverflow.com and removed status: waiting-for-triage An issue we've not yet triaged type: bug A general bug labels Oct 23, 2024
@jzheaux jzheaux self-assigned this Oct 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
for: stackoverflow A question that's better suited to stackoverflow.com in: core An issue in spring-security-core
Projects
None yet
Development

No branches or pull requests

2 participants