Cannot serialize proxied sesion scope beans.

In my case, I have some proxied session scope beans for Spring security oauth.

[sbeimin]

After some research I discovered that beans with scope="session" that will be proxied using aop:scoped-proxy/ get instantiated and stored into the org.springframework.web.context.request.RequestAttributes through the org.springframework.web.context.request.SessionScope. The SessionScope acquires the RequestAttributes instance through RequestContextHolder.currentRequestAttributes();

This RequestAttributes object contains an unwrapped ServletRequest. Said ServletRequest isn't wrapped by the SessionRepositoryFilter because it the ServletRequestAttributes gets instantiated with the original HttpServletRequest in the org.springframework.web.context.request.RequestContextListener. This Listener is called before any Filters.

A solution to this is to use a org.springframework.web.filter.RequestContextFilter instead of a org.springframework.web.context.request.RequestContextListener

[rwinch]

Closing since a work around was found.