Skip to content

Make PublicKeyCredentialCreationOptions Serializable#18354

Merged
rwinch merged 2 commits intospring-projects:mainfrom
pahlevani:gh-16431
Feb 23, 2026
Merged

Make PublicKeyCredentialCreationOptions Serializable#18354
rwinch merged 2 commits intospring-projects:mainfrom
pahlevani:gh-16431

Conversation

@pahlevani
Copy link
Copy Markdown
Contributor

Closes gh-16431

It doesn’t appear to be fixed yet—there hasn’t been an accepted or merged change addressing it in any released version. It’s possible there was a misunderstanding involving the class names PublicKeyCredentialRequestOptions and PublicKeyCredentialCreationOptions, or a mix-up with issues gh-16431 and gh-16432.

Related issues:

@Jadsy
Copy link
Copy Markdown

Jadsy commented Jan 29, 2026

any updates on this ^^?

@rwinch rwinch closed this Feb 23, 2026
@rwinch rwinch reopened this Feb 23, 2026
@rwinch rwinch self-assigned this Feb 23, 2026
@rwinch rwinch added type: enhancement A general enhancement in: webauthn WebAuthn and Passkeys and removed status: waiting-for-triage An issue we've not yet triaged labels Feb 23, 2026
rwinch added a commit to pahlevani/spring-security that referenced this pull request Feb 23, 2026
@rwinch
Copy link
Copy Markdown
Member

rwinch commented Feb 23, 2026

Thanks for the PR @pahlevani I've fixed the checkstyle errors and rebased the PR on the current main. As soon as the build passes, this will be merged into main 701736d

@rwinch rwinch added this to the 7.1.0-M3 milestone Feb 23, 2026
pahlevani and others added 2 commits February 23, 2026 15:43
Closes spring-projectsgh-16431

Signed-off-by: Mohammad Amin Pahlevani <pahlevani@live.com>
Issue spring-projectsgh-18354

Signed-off-by: Robert Winch <362503+rwinch@users.noreply.github.com>
@luschmar
Copy link
Copy Markdown

@pahlevani Great work! This must be backported to the 7.0.x release. @rwinch we are blocked because we implemented our own PublicKeyCredentialCreationOptionsRepository and cannot deserialize PublicKeyCredentialCreationOptions

From our perspective this is a bug, because even in the HttpSessionPublicKeyCredentialCreationOptionsRepository you use HttpSession therefore you must pass a serializable Object when someone want to persist such information for failover or whatever reason.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

in: webauthn WebAuthn and Passkeys type: enhancement A general enhancement

Projects

None yet

Development

Successfully merging this pull request may close these issues.

WebAuthn: credential registration fails with an unknown credential type error Make PublicKeyCredentialCreationOptions Serializable

5 participants