Deserialize details field in UsernamePasswordAuthenticationToken

[buzzerrookie]

Before this commit, the details field was set to a JsonNode, but now it is deserialized correctly.

Fixes gh-7482

[eleftherias]

Please add a test for the scenario that this commit fixes.
The test should go in the class UsernamePasswordAuthenticationTokenMixinTests.

[eleftherias]

Thanks for the PR @buzzerrookie! This is now merged into master.

[reda-alaoui]

Hi @eleftherias ,

Could you back-port this to 5.2 branch ?

[buzzerrookie]

@reda-alaoui You can add a mixin which uses the right UsernamePasswordAuthenticationTokenDeserializer to replace the default.

@Bean
public RedisSerializer<Object> springSessionDefaultRedisSerializer() {
    ObjectMapper mapper = new ObjectMapper();
    mapper.registerModules(new CoreJackson2Module(), new WebJackson2Module());
    mapper.addMixIn(UsernamePasswordAuthenticationToken.class, UsernamePasswordAuthenticationTokenMixin.class);
    return new GenericJackson2JsonRedisSerializer(mapper);
}

In the code above, UsernamePasswordAuthenticationTokenMixin is your own mixin using the right UsernamePasswordAuthenticationTokenDeserializer.

[eleftherias]

Thanks for providing a workaround @buzzerrookie.
@reda-alaoui I will not be backporting this fix because it is not passive.