spring security + form login + redis session storage -> keep coming out anonymous User about spring-session HOT 3 CLOSED

Hi, @codesejin. Thanks for the report.

I see that there is a lot of configuration in your code snippets. Can you provide a minimal, reproducible sample that we can clone so we can be sure that we won't miss anything when debugging it?

from spring-session.

Thank you for your response. Here is the GitHub link to my sample code.
I've recreated the code with minimal changes. Please let me know if there are any issues.

https://github.com/codesejin/security-test

When I debugged my code, it seemed like it wasn't accessing the HttpSessionSecurityContextRepository.

from spring-session.

Hi @codesejin. Please refer to https://docs.spring.io/spring-session/reference/configuration/redis.html#serializing-session-using-json on how to configure Spring Session Redis to properly serialize sessions using JSON.

The error you are seeing is because Spring Session Redis does not know how to deserialize the session from Redis into a SecurityContext object since there is no class information.

If you still think it is a bug in Spring Session, please provide a reproducible test or steps to reproduce the bug.

from spring-session.