Support Serialization for SecurityConfig

Issue gh-16276
This commit is contained in:
Josh Cummings 2025-01-23 16:44:10 -07:00
parent d043884e32
commit d7921daa13
No known key found for this signature in database
GPG Key ID: 869B37A20E876129
4 changed files with 7 additions and 0 deletions

View File

@ -60,6 +60,7 @@ import org.springframework.mock.web.MockHttpServletRequest;
import org.springframework.mock.web.MockHttpSession;
import org.springframework.security.access.AccessDeniedException;
import org.springframework.security.access.AuthorizationServiceException;
import org.springframework.security.access.SecurityConfig;
import org.springframework.security.access.intercept.RunAsUserToken;
import org.springframework.security.authentication.AbstractAuthenticationToken;
import org.springframework.security.authentication.AccountExpiredException;
@ -442,6 +443,7 @@ class SpringSecurityCoreVersionSerializableTests {
generatorByClassName.put(JaasAuthenticationSuccessEvent.class,
(r) -> new JaasAuthenticationSuccessEvent(authentication));
generatorByClassName.put(AbstractSessionEvent.class, (r) -> new AbstractSessionEvent(securityContext));
generatorByClassName.put(SecurityConfig.class, (r) -> new SecurityConfig("value"));
// cas
generatorByClassName.put(CasServiceTicketAuthenticationToken.class, (r) -> {

View File

@ -16,6 +16,7 @@
package org.springframework.security.access;
import java.io.Serial;
import java.util.ArrayList;
import java.util.List;
@ -29,6 +30,9 @@ import org.springframework.util.StringUtils;
*/
public class SecurityConfig implements ConfigAttribute {
@Serial
private static final long serialVersionUID = -7138084564199804304L;
private final String attrib;
public SecurityConfig(String config) {

View File

@ -30,6 +30,7 @@ import org.springframework.security.authorization.method.AuthorizationManagerBef
* @deprecated Use {@link AuthorizationManagerBeforeMethodInterceptor#jsr250()} instead
*/
@Deprecated
@SuppressWarnings("serial")
public class Jsr250SecurityConfig extends SecurityConfig {
public static final Jsr250SecurityConfig PERMIT_ALL_ATTRIBUTE = new Jsr250SecurityConfig(PermitAll.class.getName());