redis反序列化异常

最新推荐文章于 2025-04-28 14:19:45 发布

谢苏、

最新推荐文章于 2025-04-28 14:19:45 发布

阅读量3.1k

点赞数

分类专栏： oauth2 java redis

本文链接：https://blog.youkuaiyun.com/weixin_42327945/article/details/104412648

版权

在使用Spring Security与Redis结合实现OAuth2时遇到反序列化异常，原因是扩展UserDetail类并添加字段后，序列化的数据未更新导致。解决方法是清理Redis中的相关缓存，以确保新字段的正确处理。问题出现在FSTObjectInput的readObject过程中，由于找不到对应的类导致IOException。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

使用spring security扩展Userdetail 实现oauth2 时用redis做缓存实现序列化与反序列化时,遇到了下面的错误:

原因:往Userdetail的实现类中添加了字段使得程序启动正常,sevrlet转发时异常

猜测:　user 类扩展了security的Userdetail，用了redis做缓存。新增字段后，序列化的内容可能key一样并且没过期就没刷新redis的内容，导致反序列化时，字段对不上

直接把redis里面的缓存全部清空就可以了

2020-02-20 15:29:26.128 [http-nio-8000-exec-1] INFO o.a.c.core.ContainerBase.[Tomcat].[localhost].[/]:173 - Initializing Spring DispatcherServlet 'dispatcherServlet'
2020-02-20 15:29:26.129 [http-nio-8000-exec-1] INFO org.springframework.web.servlet.DispatcherServlet:525 - Initializing Servlet 'dispatcherServlet'
2020-02-20 15:29:26.139 [http-nio-8000-exec-1] INFO org.springframework.web.servlet.DispatcherServlet:547 - Completed initialization in 10 ms
unable to decode: =org.springframework.security.core.context.SecurityContextImpl Oorg.springframework.security.auth
2020-02-20 15:29:26.277 [http-nio-8000-exec-1] ERROR o.a.c.c.C.[.[localhost].[/].[dispatcherServlet]:175 - Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception
java.io.IOException: java.lang.RuntimeException: class not found CLASSNAME: loader:sun.misc.Launcher$AppClassLoader@18b4aac2
   at org.nustaq.serialization.FSTObjectInput.readObject(FSTObjectInput.java:247)
   at org.nustaq.serialization.FSTConfiguration.asObject(FSTConfiguration.java:1158)
   at org.hzcb.common.lang.ObjectUtils.unserializeFst(ObjectUtils.java:242)
   at org.hzcb.config.redis.serializer.RedisObjectSerializer.deserialize(RedisObjectSerializer.java:38)
   at org.springframework.data.redis.core.AbstractOperations.deserializeHashValue(AbstractOperations.java:355)
   at org.springframework.data.redis.core.AbstractOperations.deserializeHashMap(AbstractOperations.java:299)
   at org.springframework.data.redis.core.DefaultHashOperations.entries(DefaultHashOperations.java:247)
   at org.springframework.data.redis.core.DefaultBoundHashOperations.entries(DefaultBoundHashOperations.java:183)
   at org.springframework.session.data.redis.RedisIndexedSessionRepository.getSession(RedisIndexedSessionRepository.java:440)
   at org.springframework.session.data.redis.RedisIndexedSessionRepository.findById(RedisIndexedSessionRepository.java:412)
   at org.springframework.session.data.redis.RedisIndexedSessionRepository.findById(RedisIndexedSessionRepository.java:249)
   at org.springframework.session.web.http.SessionRepositoryFilter$SessionRepositoryRequestWrapper.getRequestedSession(SessionRepositoryFilter.java:351)
   at org.springframework.session.web.http.SessionRepositoryFilter$SessionRepositoryRequestWrapper.getSession(SessionRepositoryFilter.java:289)
   at org.springframework.session.web.http.SessionRepositoryFilter$SessionRepositoryRequestWrapper.getSession(SessionRepositoryFilter.java:192)
   at javax.servlet.http.HttpServletRequestWrapper.getSession(HttpServletRequestWrapper.java:244)
   at org.springframework.security.web.context.HttpSessionSecurityContextRepository.loadContext(HttpSessionSecurityContextRepository.java:111)
   at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:100)
   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
   at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56)
   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)
   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
   at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215)
   at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)
   at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:358)
   at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:271)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
   at org.springframework.session.web.http.SessionRepositoryFilter.doFilterInternal(SessionRepositoryFilter.java:141)
   at org.springframework.session.web.http.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:82)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
   at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:108)
   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(Applicat

最低0.47元/天解锁文章