Issue with keycloak and infinispan 11.0.13.Final

[Pierre GINDRAUD]

Hello,

Following the log4j patching campaign https://infinispan.org/blog/2021/12/13/infinispan-log4j-cve-releases I've upgrade my infinispan cluster to 11.0.13.Final, currently Keycloak is up to date with 16.1.0. I've got theses errors each time keycloak try to use infinispan cache

Class 'java.util.UUID' blocked by deserialization white list. Adjust the configuration serialization white list regular expression to include this class.

This happen with java.util.UUID and org.keycloak.cluster.ClusterEvent as I can notice.

I've tried to add

- '-Dinfinispan.deserialization.allowlist.regexps=(java\.util\.|org\.keycloak\.cluster\.infinispan.).*'

or

- '-Dinfinispan.deserialization.allowlist.regexps=.*'

to infinispan command line, but no changes

I did not find any information on the official keycloak documentation, have you ever encountered this problem ?

Full stacktrace

17:33:24,252 ERROR
[org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider] (default
task-5) Failed to make identity provider oauth callback:
org.infinispan.client.hotrod.exceptions.HotRodClientException:Request
for messageId=419 returned server error (status=0x85):
org.infinispan.commons.CacheException: ISPN000936: Class
'java.util.UUID' blocked by deserialization white list. Adjust the
configuration serialization white list regular expression to include
this class.
     at  org.infinispan.client.hotrod@12.1.7.Final//org.infinispan.client.hotrod.impl.protocol.Codec20.checkForErrorsInResponseStatus(Codec20.java:333)
     at
org.infinispan.client.hotrod@12.1.7.Final//org.infinispan.client.hotrod.impl.protocol.Codec20.readHeader(Codec20.java:172)
     at
org.infinispan.client.hotrod@12.1.7.Final//org.infinispan.client.hotrod.impl.transport.netty.HeaderDecoder.decode(HeaderDecoder.java:139)
     at
org.infinispan.client.hotrod@12.1.7.Final//org.infinispan.client.hotrod.impl.transport.netty.HintedReplayingDecoder.callDecode(HintedReplayingDecoder.java:94)
     at
io.n...@4.1.68.Final//io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276)
     at
io.n...@4.1.68.Final//io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
     at
io.n...@4.1.68.Final//io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
     at
io.n...@4.1.68.Final//io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
     at
io.n...@4.1.68.Final//io.netty.handler.timeout.IdleStateHandler.channelRead(IdleStateHandler.java:286)
     at
io.n...@4.1.68.Final//io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
     at
io.n...@4.1.68.Final//io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
     at
io.n...@4.1.68.Final//io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357)
     at
io.n...@4.1.68.Final//io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410)
     at
io.n...@4.1.68.Final//io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379)
     at
io.n...@4.1.68.Final//io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365)
     at
io.n...@4.1.68.Final//io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919)
     at
io.n...@4.1.68.Final//io.netty.channel.epoll.AbstractEpollStreamChannel$EpollStreamUnsafe.epollInReady(AbstractEpollStreamChannel.java:795)
     at
io.n...@4.1.68.Final//io.netty.channel.epoll.EpollEventLoop.processReady(EpollEventLoop.java:480)
     at
io.n...@4.1.68.Final//io.netty.channel.epoll.EpollEventLoop.run(EpollEventLoop.java:378)
     at
io.n...@4.1.68.Final//io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:986)
     at
io.n...@4.1.68.Final//io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
     at
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
     at
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
     at java.base/java.lang.Thread.run(Thread.java:829)