Add Jackson Support for Objects stored in HttpSession

[vpavic]

This is a request to provide custom Jackson-based serialization mechanism for Spring Security SAML objects that are placed in HttpSession.

See the following related issues:

• Add Jackson Support for Objects stored in HttpSession spring-projects/spring-security#3736
• GenericJackson2JsonRedisSerializer fails during session serialization/deserialization when spring security is configured with SAML web security configuration. spring-projects/spring-session#1006
• spring-projects/spring-session#406 (comment).

[BatScream]

Any updates on this issue?

[GangZhang]

emm, Any updates?

[vnobo]

forgotten

[vpavic]

@rwinch @fhanik Could this issue be considered for one of the 2.0.0 milestones? This is quite important for Spring Security SAML users who also want to use Spring Session.

[rwinch]

Thanks. I think this will probably be taken into account after we have more stable APIs. The project is still quite dynamic at the moment.

[morpel]

@rwinch Any updates?

[rwinch]

We aren't really enhancing the old SAML support since it is dependent on old versions of Open SAML. I'd be excited to see this support added to the new Spring Security SAML support https://github.com/spring-projects/spring-security/tree/master/saml2/saml2-service-provider To do that, I'd suggest creating a ticket in Spring Security to get things started.