Ignite认证插件实现遭遇NotSerializableException问题求助

I've run into this exact issue before when building Ignite security plugins, so let me break down what's happening and how to fix it quickly.

The root cause of your NotSerializableException is the anonymous SecurityContext implementation you're returning from authenticateNode(). Anonymous inner classes in Java don't implement Serializable by default, and they also hold an implicit reference to the outer AuthPluginProcessor instance. When Ignite tries to serialize this context (especially since you have isGlobalNodeAuthentication() set to true, which requires cross-node serialization of security contexts), it hits the serialization failure.

Here are two straightforward solutions:

Solution 1: Use a Serializable Static Inner Class (Recommended) #

Replace the anonymous inner class with a static inner class that explicitly implements both SecurityContext and Serializable. Static inner classes don't hold a reference to the outer class instance, which avoids extra serialization baggage, and we explicitly mark it as serializable for Ignite's needs.

Here's your modified code:

public class AuthPluginProcessor implements IgnitePlugin, GridSecurityProcessor, Serializable {

    // Static inner class with explicit Serializable implementation
    private static class SerializableSecurityContext implements SecurityContext, Serializable {
        @Override
        public SecuritySubject subject() {
            return null;
        }

        @Override
        public boolean taskOperationAllowed(String s, SecurityPermission securityPermission) {
            return true;
        }

        @Override
        public boolean cacheOperationAllowed(String s, SecurityPermission securityPermission) {
            return true;
        }

        @Override
        public boolean serviceOperationAllowed(String s, SecurityPermission securityPermission) {
            return true;
        }

        @Override
        public boolean systemOperationAllowed(SecurityPermission securityPermission) {
            return true;
        }
    }

    @Override
    public SecurityContext authenticateNode(ClusterNode clusterNode, SecurityCredentials securityCredentials) throws IgniteCheckedException {
        // Return our serializable context instance
        return new SerializableSecurityContext();
    }

    @Override
    public boolean isGlobalNodeAuthentication() {
        return true;
    }

    @Override
    public boolean enabled() {
        return true;
    }

    // Remaining empty method implementations...
}

Solution 2: Disable Global Node Authentication (If Permitted) #

If your use case doesn't require cross-node security context validation, you can set isGlobalNodeAuthentication() to false. This tells Ignite not to serialize and transfer the SecurityContext between nodes, which would avoid the exception. However, this is only viable if you don't need consistent security checks across the cluster.

Quick Note #

If you ever need to return a non-null SecuritySubject from your context, make sure that the SecuritySubject implementation also implements Serializable—otherwise you'll hit the same exception again.

内容的提问来源于stack exchange，提问作者user9841696