Uploaded image for project: 'Crowd Data Center'
  1. Crowd Data Center
  2. CWD-4864

CrowdSSOAuthenticationToken is not serializable, which can lead to errors when using a session-replicating springsecurity integration

    XMLWordPrintable

Details

    Description

      CrowdSSOAuthenticationToken is declared serializable, but the Principal it stores (CrowdUserDetails) is not.

      This gets saved to the HTTP session, and can lead to errors when trying to use Crowd's Spring Security integration with a solution that does attempt to serialize the session (for example for session replication)

      Attachments

        Issue Links

          Activity

            People

              f7ca0352f3cf Konrad Paniec (Inactive)
              lpater Lukasz Pater
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: