ActiveMQ序列化异常Forbidden class ! This class is not trusted to be serialized as ObjectMessage payload-优快云博客

本文解析了ActiveMQ中因序列化白名单限制导致的JMSException错误，并提供了两种解决方案：一是开启信任所有包名，二是指定信任的包名列表。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

javax.jms.JMSException: Failed to build body from content. Serializable class not available to broker. Reason: java.lang.ClassNotFoundException: Forbidden class com.yy.pojo.User! This class is not trusted to be serialized as ObjectMessage payload. Please take a look at http://activemq.apache.org/objectmessage.html for more information on how to configure trusted classes.
   at org.apache.activemq.util.JMSExceptionSupport.create(JMSExceptionSupport.java:36)
   at org.apache.activemq.command.ActiveMQObjectMessage.getObject(ActiveMQObjectMessage.java:213)
   at com.yy.jms.listener.LoginMessageListener.onMessage(LoginMessageListener.java:17)
   at org.springframework.jms.listener.AbstractMessageListenerContainer.doInvokeListener(AbstractMessageListenerContainer.java:744)
   at org.springframework.jms.listener.AbstractMessageListenerContainer.invokeListener(AbstractMessageListenerContainer.java:682)
   at org.springframework.jms.listener.AbstractMessageListenerContainer.doExecuteListener(AbstractMessageListenerContainer.java:649)
   at org.springframework.jms.listener.AbstractPollingMessageListenerContainer.doReceiveAndExecute(AbstractPollingMessageListenerContainer.java:317)
   at org.springframework.jms.listener.AbstractPollingMessageListenerContainer.receiveAndExecute(AbstractPollingMessageListenerContainer.java:255)
   at org.springframework.jms.listener.DefaultMessageListenerContainer$AsyncMessageListenerInvoker.invokeListener(DefaultMessageListenerContainer.java:1168)
   at org.springframework.jms.listener.DefaultMessageListenerContainer$AsyncMessageListenerInvoker.executeOngoingLoop(DefaultMessageListenerContainer.java:1160)
   at org.springframework.jms.listener.DefaultMessageListenerContainer$AsyncMessageListenerInvoker.run(DefaultMessageListenerContainer.java:1057)
   at java.lang.Thread.run(Thread.java:748)
Caused by: java.lang.ClassNotFoundException: Forbidden class com.yy.pojo.User! This class is not trusted to be serialized as ObjectMessage payload. Please take a look at http://activemq.apache.org/objectmessage.html for more information on how to configure trusted classes.
   at org.apache.activemq.util.ClassLoadingAwareObjectInputStream.checkSecurity(ClassLoadingAwareObjectInputStream.java:112)
   at org.apache.activemq.util.ClassLoadingAwareObjectInputStream.resolveClass(ClassLoadingAwareObjectInputStream.java:57)
   at java.io.ObjectInputStream.readNonProxyDesc(ObjectInputStream.java:1868)
   at java.io.ObjectInputStream.readClassDesc(ObjectInputStream.java:1751)
   at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:2042)
   at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1573)
   at java.io.ObjectInputStream.readObject(ObjectInputStream.java:431)
   at org.apache.activemq.command.ActiveMQObjectMessage.getObject(ActiveMQObjectMessage.java:211)
   ... 10 more

原因是ActiveMQ对序列化有包名的白名单限制，可以把包名加入到配置中，或者关闭掉白名单限制

<bean id="targetConnectionFactory" class="org.apache.activemq.ActiveMQConnectionFactory">
    <property name="brokerURL" value="tcp://127.0.0.1:61616"></property>
    <property name="trustAllPackages" value="true"/>
</bean>

或者

<bean id="targetConnectionFactory" class="org.apache.activemq.ActiveMQConnectionFactory">
    <property name="brokerURL" value="tcp://127.0.0.1:61616"></property>
    <property name="trustedPackages">
        <list>
            <value>java.lang</value>
            <value>java.util</value>
            <value>java.sql</value>
            <value>net.sf.json</value>
        </list>
    </property>
</bean>