Cannot serialize OAuth2AuthenticationToken to JSON

[bberto]

Summary

For a simple app with OIDC login I cannot serialize Principal/OAuth2AuthenticationToken as JSON:

@SpringBootApplication
@RestController
public class WebApplication {

  @RequestMapping("/user")
  public Principal user(Principal user) {
    return user;
  }
  
  public static void main(String[] args) {
    SpringApplication.run(WebApplication.class, args);
  }
  
}

Failed to write HTTP message: org.springframework.http.converter.HttpMessageNotWritableException: Could not write JSON: Unable to convert claim 'iat' to Instant: For input string: "Fri Feb 02 14:05:58 CET 2018"; nested exception is com.fasterxml.jackson.databind.JsonMappingException: Unable to convert claim 'iat' to Instant: For input string: "Fri Feb 02 14:05:58 CET 2018" (through reference chain: org.springframework.security.oauth2.client.authentication.OAuth2AuthenticationToken["principal"]->org.springframework.security.oauth2.core.oidc.user.DefaultOidcUser["issuedAt"])

Version

Spring Boot 2.0.0.RC1
Spring Security 5.0.1.RELEASE

[jgrandja]

Looks like this is a Jackson related issue. Can you ensure the following dependency is included:

<dependency>
    <groupId>com.fasterxml.jackson.datatype</groupId>
    <artifactId>jackson-datatype-jsr310</artifactId>
</dependency>

you might need this as well

<dependency>
    <groupId>com.fasterxml.jackson.datatype</groupId>
    <artifactId>jackson-datatype-jdk8</artifactId>
</dependency>

See the Jackson docs for further info.

Let me know if this resolves your issue.

[bberto]

They're both included. I've also tried to update at jackson 2.9.4 without success.

I noticed that here claim is a Date, and Long.valueOf raises the NumberFormatException

[rwinch]

Thanks for the report @bberto I believe this is a duplicate of #4886

[rwinch]

I'm closing this as a duplicate of #4886