org.springframework.security.oauth2.common.util

Class SerializationUtils

java.lang.Object

org.springframework.security.oauth2.common.util.SerializationUtils

Deprecated.

See the OAuth 2.0 Migration Guide for Spring Security 5.

@Deprecated
public class SerializationUtils
extends Object

This is a helper class for serializing and deserializing objects with a SerializationStrategy. The class looks for the strategy in META-INF/spring.factories, or the strategy can also be set by calling setSerializationStrategy(SerializationStrategy). If no strategy is specified, the default is DefaultSerializationStrategy.

Note that the default strategy allows deserializing arbitrary classes which may result in security problems if data comes from an untrusted source. To prevent possible issues, use WhitelistedSerializationStrategy with a list of allowed classes for deserialization.

Constructor Summary

Constructors

Constructor and Description
SerializationUtils() Deprecated.

Method Summary

Modifier and Type	Method and Description
static <T> T	deserialize(byte[] byteArray) Deprecated.
static SerializationStrategy	getSerializationStrategy() Deprecated.
static byte[]	serialize(Object object) Deprecated.
static void	setSerializationStrategy(SerializationStrategy serializationStrategy) Deprecated. Sets a new serialization strategy.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SerializationUtils

public SerializationUtils()

Deprecated.

Method Detail

getSerializationStrategy

public static SerializationStrategy getSerializationStrategy()

Deprecated.

Returns:

The current serialization strategy.

setSerializationStrategy

public static void setSerializationStrategy(SerializationStrategy serializationStrategy)

Deprecated.

Sets a new serialization strategy.

Parameters:

serializationStrategy - The serialization strategy.

serialize

public static byte[] serialize(Object object)

Deprecated.

deserialize

public static <T> T deserialize(byte[] byteArray)

Deprecated.