Spring Security整合过程中，User类实现UserDetails接口，存入Redis，反序列化报错问题。

最新推荐文章于 2025-10-05 10:54:46 发布

原创最新推荐文章于 2025-10-05 10:54:46 发布 · 533 阅读

2 ·

CC 4.0 BY-SA版权

文章标签：

#spring #redis #java

文章讲述了在整合SpringSecurity时，如何将登录成功的用户信息存储到Redis中，遇到的序列化问题及解决方案，即在User类上添加`@JsonIgnoreProperties(ignoreUnknown=true)`和`@JsonIgnore`注解以解决异常。

最近在整合Spring Security过程中，登陆成功后想把获取到的用户信息存入Redis。其中User类实现了UserDetails接口。

User类如下：


@Data
@NoArgsConstructor
@AllArgsConstructor
public class LoginUser implements UserDetails {

    //用户信息
    private SysUser sysUser;
    //用户权限集合
    private List<String> permissions;

    private List<SimpleGrantedAuthority> authorities;

    public LoginUser(SysUser sysUser,List<String> permissions){
        this.sysUser = sysUser;
        this.permissions = permissions;
    }

    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        if(authorities != null){
            return authorities;
        }
        authorities = this.permissions.stream().map(SimpleGrantedAuthority ::new).collect(Collectors.toList());
        return authorities;
    }

    @Override
    public String getPassword() {
        return sysUser.getPassword();
    }

    @Override
    public String getUsername() {
        return sysUser.getUserName();
    }

    @Override
    public boolean isAccountNonExpired() {
        return sysUser.getAccountNotExpired();
    }

    @Override
    public boolean isAccountNonLocked() {
        return sysUser.getAccountNotLocked();
    }

    @Override
    public boolean isCredentialsNonExpired() {
        return sysUser.getCredentialsNotExpired();
    }

    @Override
    public boolean isEnabled() {
        return sysUser.getEnabled();
    }
}

登陆成功后要把用户信息存入Redis，此时就会报错如下：

Caused by: org.springframework.data.redis.serializer.SerializationException: Cannot deserialize; nested exception is org.springframework.core.serializer.support.SerializationFailedException: Failed to deserialize payload. Is the byte array a result of corresponding serialization for DefaultDeserializer?; nested exception is java.io.InvalidClassException: weixin.popular.bean.token.Token; local class incompatible: stream classdesc serialVersionUID = -584152862903853930, local class serialVersionUID = 8841433872811285796

此时只要在LoginUser类中加入以下注解，即可解决：

@Data
@NoArgsConstructor
@AllArgsConstructor
@JsonIgnoreProperties(ignoreUnknown = true)
public class LoginUser implements UserDetails {

    //用户信息
    private SysUser sysUser;
    //用户权限集合
    private List<String> permissions;

    @JsonIgnore
    private List<SimpleGrantedAuthority> authorities;

    public LoginUser(SysUser sysUser,List<String> permissions){
        this.sysUser = sysUser;
        this.permissions = permissions;
    }

    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        if(authorities != null){
            return authorities;
        }
        authorities = this.permissions.stream().map(SimpleGrantedAuthority ::new).collect(Collectors.toList());
        return authorities;
    }

    @Override
    public String getPassword() {
        return sysUser.getPassword();
    }

    @Override
    public String getUsername() {
        return sysUser.getUserName();
    }

    @Override
    public boolean isAccountNonExpired() {
        return sysUser.getAccountNotExpired();
    }

    @Override
    public boolean isAccountNonLocked() {
        return sysUser.getAccountNotLocked();
    }

    @Override
    public boolean isCredentialsNonExpired() {
        return sysUser.getCredentialsNotExpired();
    }

    @Override
    public boolean isEnabled() {
        return sysUser.getEnabled();
    }
}

class上加上

@JsonIgnoreProperties(ignoreUnknown = true)

在属性上加入

@JsonIgnore

完美解决