It seems as if the implementation of the CsrfPreventionFilter.LruCache
is the issue, particularly the cache field (anonymous inner class).
You could try to write a custom kryo serializer for this class, but I
doubt that it's possible to recreate/deserialize an LruCache instance
with the same properties/the same behaviour (as the cacheSize will not
be accessible).
Alternatively you could try to use java serialization and see if this works.
Of course you might also switch off the CsrfPreventionFilter, not sure
if this is an option.
Cheers,
Martin
--
inoio gmbh -
http://inoio.de
Breitenfelder Str. 13c, 20251 Hamburg
Amtsgericht Hamburg, HRB 123031
Geschäftsführer: Dennis Brakhane, Martin Grotzke, Ole Langbehn