From 27c2a8ad11afa3ac9ae88a67d03d32ec6b3c1e9d Mon Sep 17 00:00:00 2001
From: Josh Cummings <3627351+jzheaux@users.noreply.github.com>
Date: Tue, 17 Dec 2024 13:05:23 -0700
Subject: [PATCH] Add Serializable Compatibility to Web Authentication
 Exceptions

Issue gh-16276
---
 ...ingSecurityCoreVersionSerializableTests.java |  16 ++++++++++++++++
 ...catedCredentialsNotFoundException.serialized | Bin 0 -> 16420 bytes
 ...n.rememberme.CookieTheftException.serialized | Bin 0 -> 10859 bytes
 ...rememberme.InvalidCookieException.serialized | Bin 0 -> 10861 bytes
 ...RememberMeAuthenticationException.serialized | Bin 0 -> 16357 bytes
 ...on.SessionAuthenticationException.serialized | Bin 0 -> 10753 bytes
 ...ication.www.NonceExpiredException.serialized | Bin 0 -> 16338 bytes
 ...thenticatedCredentialsNotFoundException.java |   7 ++++++-
 .../rememberme/CookieTheftException.java        |   7 ++++++-
 .../rememberme/InvalidCookieException.java      |   7 ++++++-
 .../RememberMeAuthenticationException.java      |   7 ++++++-
 .../session/SessionAuthenticationException.java |   7 ++++++-
 .../www/NonceExpiredException.java              |   5 +++++
 13 files changed, 51 insertions(+), 5 deletions(-)
 create mode 100644 config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.preauth.PreAuthenticatedCredentialsNotFoundException.serialized
 create mode 100644 config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.rememberme.CookieTheftException.serialized
 create mode 100644 config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.rememberme.InvalidCookieException.serialized
 create mode 100644 config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException.serialized
 create mode 100644 config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.session.SessionAuthenticationException.serialized
 create mode 100644 config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.www.NonceExpiredException.serialized

diff --git a/config/src/test/java/org/springframework/security/SpringSecurityCoreVersionSerializableTests.java b/config/src/test/java/org/springframework/security/SpringSecurityCoreVersionSerializableTests.java
index ecc30bd446a..5072da9f5c4 100644
--- a/config/src/test/java/org/springframework/security/SpringSecurityCoreVersionSerializableTests.java
+++ b/config/src/test/java/org/springframework/security/SpringSecurityCoreVersionSerializableTests.java
@@ -128,6 +128,12 @@
 import org.springframework.security.saml2.provider.service.authentication.TestSaml2RedirectAuthenticationRequests;
 import org.springframework.security.web.authentication.WebAuthenticationDetails;
 import org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken;
+import org.springframework.security.web.authentication.preauth.PreAuthenticatedCredentialsNotFoundException;
+import org.springframework.security.web.authentication.rememberme.CookieTheftException;
+import org.springframework.security.web.authentication.rememberme.InvalidCookieException;
+import org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException;
+import org.springframework.security.web.authentication.session.SessionAuthenticationException;
+import org.springframework.security.web.authentication.www.NonceExpiredException;
 
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.assertj.core.api.Assertions.fail;
@@ -328,6 +334,16 @@ class SpringSecurityCoreVersionSerializableTests {
 			token.setDetails(details);
 			return token;
 		});
+		generatorByClassName.put(PreAuthenticatedCredentialsNotFoundException.class,
+				(r) -> new PreAuthenticatedCredentialsNotFoundException("message", new IOException("fail")));
+		generatorByClassName.put(CookieTheftException.class, (r) -> new CookieTheftException("message"));
+		generatorByClassName.put(InvalidCookieException.class, (r) -> new InvalidCookieException("message"));
+		generatorByClassName.put(RememberMeAuthenticationException.class,
+				(r) -> new RememberMeAuthenticationException("message", new IOException("fail")));
+		generatorByClassName.put(SessionAuthenticationException.class,
+				(r) -> new SessionAuthenticationException("message"));
+		generatorByClassName.put(NonceExpiredException.class,
+				(r) -> new NonceExpiredException("message", new IOException("fail")));
 	}
 
 	@ParameterizedTest
diff --git a/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.preauth.PreAuthenticatedCredentialsNotFoundException.serialized b/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.preauth.PreAuthenticatedCredentialsNotFoundException.serialized
new file mode 100644
index 0000000000000000000000000000000000000000..6d7a94c295056eecba83fa32183d38fbf96d17f0
GIT binary patch
literal 16420
zcmeHOU5p&X5$-+Phix$a!Pv&X*k1n-hw=H}#>VD2-`R%q55BV@hCt?K`|ifx-C1UO
z?K_C_XONN*6cm&|AVPUSAqn9nkU*43QKT3}N*=-k4|zxwMT&@!B1OtuB*&?*yQin;
zXYbark&w8Ty4mjPs_Lrh>h7w(pZt@}h(cBg!VxEGgnoTwICN|LLJ*#FBJMRqUyM5!
z_>ki^#VD@}-*bf@)SX7i(c+v4d3VyoD?K5v0L`sN#{$t8H0zb#F^@MeX!*)#mdtzT
z4@){28w=T<30ZnU$Q_F^4NvGyf1vAcH;xP{I!n*G=Uu1j)<>L^P2ybR2Jw~0IuFg>
ze(~=L@s<S9VEpm&s{Kp%F8^%~V{kMKF1SNg{{Fi=Htf0Z&hMwO>HTbm=QblQ*scAb
zwHZt|8_d1^Y)*v>*RLMsQRI#g-U176KtQ{DA7-;7;d<u=L)RmWl@F&-;*Q=buaO#w
z<ie=gAZ14pPZSvmHct&}3ctF!-;c!Ju?Cq@P0<gWBgf4Yt6z#LeBHlZ#}prDUtrS!
zZWL_#FiF}BV+oW72aIU31RZ^!+PClWnmriaV2r&=Y?dXO%nfj7U3zK#&Oblh!Dime
zI){U>=87Y1cGa)*W6jzS5Bu3%uj)oof8bVlc#ND40(JJYn=70;prju3>(-gWewABT
zvuj+829;DxP-&)c=G0`%X&y%8H<Hj;qr_P0gkaO$MnkYe6FT33TnGc&{d>q2HK_p}
zl4tu*z%d4SB*+k(+edbwHZon+tqoP&GPwaQr}B<1jfR};T#}G&hqUtr+YJHzI^onk
zvZr4cJgmD_XN1>z=!zh8YJTK7hvJ_HIjtD93${4ls5#Hnqq)uTKFx7|3y!01y;3Dj
zI;SEY4v;feeO@svPK1F+&I!J2Cq~dRETDB^MxW$Svnp(9c4}$%{a?}?R<a7Vx=<F~
zttFX7lH>)rs0CQxLI5LspX-qW3$`%RBB_JOa(iB9Bw2tp0BZ%CKcZ~Mj|CNe+O0Ni
zt8_dk@daxo#*x@Hdg~*!v`CChi=O11m`j!ed&x+&0bd&hyUC-VF8J}Gv)oG=<(&*F
zer~d7cQ%6{*b+tSWDp2N?}+wbdsw#|MxN6`*S%pFgvO@x?Voyji@cy-@v*tM)jo=6
z$LkWwW+KDOd~k~AIWH@ljebeXw6cXv-3|Xptx+Xy=`UmN?KYXWj7FqK?-Hz2akY?2
zo<UlGuUlw4pfx5V4DV@%A?*M<@W_bBqj+$~l`B{NOJVHJvz2p6YzX;ql`Q8RqquUO
zAC+;k+f&O^$-JUfmsaNue*JuKj&}(*ONRI%7rR~OmR(MlvrPpl+6UOt2E@G^U_W)M
zLHKnKKzD+;iDcYTDC0q1<s&3#eWXav)f06ah4&P&?AT2#mn8dBtP{mWup8A!YZ?@U
zJFb8*1>w!`fwRrJFPuiz71+!iFR0amdgNf|bxtacllz^bpR^k+%(Q5|-lSBdc*jOW
zxZkHaZA&<vZ8m%g_70Z|+u>uh4ap;y8hwN;q|RV;49PadW^5oT^NP(Wj%z2|;FR!?
zs}{$%AnX}+{d$?gh+mO*OOOOxmHfz#Fq(eAmgakH%v<m}wr^*Uj&wm&^p5EUns>HI
z&wG~KCLylP>v_ow;55L4v_l#^Y~t9=^OkuuH)>gG)F7uQK+!Tkazu_4>`YslCR5Af
zaebs$S{l+oo9B2~j-BZ|wP-xDgIlHOv&OX063UI#`nXk}G=kyNfnQOQmb+}-d{)bP
z&$Y@5I*$o9S9A2`4AQ*RCL!2BTfAZ~H}i}=&@}K$;&os@2$1qJ8IEWj-+fISi)r79
zX1T3Mdk+eBvxgPZU6*2=vv+g0E`yApJ+>VlF$hEWdMt+^U01Sef$%3uK`?o6QZXwN
zNh&<@LLW=nf!iy0z}G?3A=rvmUD~B?OBpypF7LLdb3_Z%ohaS}P#xEBt)Ww+GwRcM
zHuOg6Vp(;}U8*OjVk?u!*?gmx<pvcSQ<{EXat4s+{(z3#$`=z+Z9%`DLC4Qj@HjXb
zLLABVUgcDA>Vr&!Zgh?ggZ587y=7X}dX^_~9f@dTua1{@+H+9KhMXaQ+<jAX_?DT&
z6Zm>kun9<~?D#b~QZQ?KYRit84V@wIM^C2H4Ur45<yJ>raA-rUJ@&{+XZ+3Fj2Gm!
zXj80Y2H<B(hifH*U=LlTnFr{8OAgH4%3;gVVR#j^gOKi&=Y6CCoVIaeokq=}nx7K$
z11;w1s}$3Azw$vo?9#RD;CS7w`JOE+s6Uz0&3lq5fYf^);aQ0wn7m@P6Px1A6};`}
zv`VfRz4N9!rA~69)r@Fz5j>yVzO_G;x5aLNgYDaNc-$lpkMejI2{K&G=?lVM*Bd?F
zh|1=(e0-R8XWH;gOB7qhr6YGkfN}OXe2K`f&ygoOoR0b)KjAkx@+9SL<t>6O%C(y*
zez%DDn{5)`THb=;GHw+Tx+G8cFHem0wnTaXNG}3>#FVZZyUx#$nl>gj=ng}790|0t
z`5K@M2c5Q5GUaB|tj#-*ZUOLyle|W|JsrL<`;4JG{zFVQBuum)<qTRrOmRW#S+E;4
z-2!r@g>9O4*L5*%TlQ}UY1&`YYOoX=DRo;dv<F(h)MA1zepsZC%S3o}PQTqlq-fU@
z@j9Z5Lbgd8ai$kE#_1p#6cPWobnTy^>*ut<FNAJ`4s|`PN3idZIO}raB#|Kr8zA~3
z<%RiqO8C(2VSqp0RO#{pN!S~iMfR&Aqz_Z#&WtG+pmq$BoNID&=G+oPWq5eKfCxDw
zTHi28MJu0H8Tx+!@ESl1E22v&8eeY%WR_CNwg&otQGi4SK<h67WHc&N)KzN}<bGYi
zj`WDu-vC^jo>)7}==vc|nT1WcFPq$bk(tV#oZ#%Kqvj^G$Q!9TTICSr(vS%1d=G@r
z$EPi@nDiK*y|{qF7i|jaeuCyN1AGPGqK)tzS~4;`Z6i!7L-r~Gf?u^MOn7ymL*<MQ
zDC(-hoIF&T0|h9_;Ft@uP|h7j@@Me%4Z2RLi)?qbYP0{o!TY3Z8H)G^K>JDs_J>p2
z%-`75br<SU-iNPeZAI-t3#Ha%AvKdCpD4rA>K06yr&e9&+LH=DaiOsHDsQ?uF1miU
zthl3?`MY}dR<h0HMXGMI?u}9cUp`?_<vDfNr)2hV%5>44R$ne|pP;vx@sA{90;L%M
zo%oqji%RHDfN&RvAR=lC`5SR6L9DLsHu|Cqz8JNVumkdvY)VszUCKF<L13AZQeK+K
zd%6mYm)4)oMf7W>QiUbcQmm&_U@2!g7h=rINw8TW6lb=w62z6NM2N*neJXCu%R!2u
z{Z6pQG0Bn8r7F7PHvFVsCn)t7IfDFwu92$FWW4CUQ&e?2p^Hw)bjS*zskWDOf|ND`
z)5)Var6gE+lJQbnx*y3xQ52=g#OoXr@Nm>EEdp39*lgrBqNv=}Wt;>^kJ2n<R{uKB
zQgfXiiJ)N%b%6NEoc`qe2AXu2H!3pv6Kr{lp4g716){IuY=yt5iYLAf0A#Kzsj?{g
zi|Uh9H%C`5Kwm2)Dq^DRFn~Ou<S0SwWzvGIP--ps@f(qfA2nRzjauc&gSv@oUv%9=
zYMp{n+^C&lW;`yQIG8Mv_Fqqulr{itv^!Um1iLKn&P&h}kWgdFdDVlTm?;$vTXz~G
zq}V+|?2b*yj_f-&9&_lfxDCqVl;hvD$dZDQc~x**(U_QjQlw#2alb<R7oeI=t7dF`
zt5cRkcS;Sdpv94N=?6Vf;O}UVeCjs2uj0`i?Hlmc2jypZ8|5F8pW05-!e-sJ!c!S5
zOb}yo9AMHNv>0?Yl=2)$DXT?q*y<{2jb~OiuMs)f-EtU#B&uVo2PW!7U0&vYwH`=^
z2qj50)Ur_}s9JHlrGuJnQ>jC+rG@RrT4s-dG~>kZe#=`XW;ie&30~{Q>n2rQm+@A)
zY|MSb<Ve~?)2WzcPU#TlkW>u<MhTBzO83S}#dax!0qur&X%(~~^dY&OD8Zz~*sa;7
zSSzJeu}Ho4f(YPR>Z5mn$YYW?AzPKChV=GAK_V*m)*3>lNS}CT@mu>|d*v_kDc~5T
zENf&ydgs_AN^A~I<W=?ZgXUB^fi`*ZT7a)x02bPlRuA3KjLn5D23TSv7)jYu^eqEO
zJ*iSBKs2ueSOsvqP2nP1qzvlK6@I2DoGCz9XHn>Q&LAN8v5f$CSO~dCR6t0*jJoQl
zQ=s73EYu?@G<N}P0oZCIaJ0y2CPHqv5iS`7sj^-8nL@}uRsw=uaLYYZ0>a*y#m8}f
zBp1}Lcp&Qi0Q~?*W1+F`_Mt^8?l``r%ckBBBn~tHg!}`8B*k$W2oC~0WV3i4Es{lo
zaK=W+J~ILSBQ}CMDx+DV%9jD3vk}aRpCvB?JR3p1y8s30DfwB*bBq*HGRq^}X=afi
z_%@4m1qdI>`v&k)g?)UPLm{j=X(s1=BV<D1ygiHS^%wwrKDo&l*kY|wb&K@D2L?gr
z*YXL7_a;Ly7gN?E{aBR1{B~?^RqO?i7XYrYg!yIzL|y@q5uvCg(q0z-y45+Ul-<Vc
z+CpllM$uMffy$zg>BmM-uj4Coi)t%D-<~qt5xgx*RLF#+KLvObV5*!|SnzMl3rd%z
zGN;OZ>}9ypH3p1!e0<6*Q)NFo4^LXP#?D=|Ynp2{5H`VS<zcbKzMGthKe=ZhRrZ6X
zrV3JU8hOZ*PLue=)fQ2wv`OwH|3~oJwAt4A+*EMb71Dc&LHVgLV3IGT4j@d+A*d1=
z`ep#+D^=IOlm$Ms;}brnY3>M#45gcF1T)P9Aw5lV`!3A|^?3x+2yGUcFc>+o(!vx4
zl95V8XkP??Bv{EL!O&@!U(mTUmL8pt%8|>>NK>&ur%J{mDOS22z;u2b(=`ydEN9cA
z(lALG0u#i>RQfbPrf7gB2VgUSY(^jLTO{Wd_}rSx+@obXzzzVDM}@Rc$uTAoUNY%2
zbY4rA9Gp;RD(xqb_!`KLOP;tdWs=C~Y$L;rfxQ5I0A@N^DJI!!AslW<e)o<258yPA
AivR!s

literal 0
HcmV?d00001

diff --git a/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.rememberme.CookieTheftException.serialized b/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.rememberme.CookieTheftException.serialized
new file mode 100644
index 0000000000000000000000000000000000000000..e983ebc0136e7999e14fce514a16b86914eb5597
GIT binary patch
literal 10859
zcmeGiTWlRib?i8f<2H#C@@kScO?sO^qi&pc(l`&tc3wDf>g$BkhM@7@@%6@gcQ?Cp
zV>_S<Xe&f{l_IsML4gmT0+lZcjf#Z$AQcinfYc8@fC>p!Ao0Z?QV8eF%+Ag}?)5c^
z_#r=YXJ^iwbLN~gXU;iu-}(nx7=>iS535!bgpOC82x*N?`{9%oF}of*eAb#~;})&+
zN#=3Krrhy8D`YiR8)spSSp&X5<*>0yHo=ExY!=}B^*?t#`oZ~kZ?qFK6OxN}fqhgF
zI>Y)?9B5MX<!3ra?C<<uk~+|ol<kMiYJg`$$J4!kd7wHb@vOT{uTsmUUey|{!?tTo
z6TI>1&J*3cU-+v8{73?*A%1&%<KcA&H~cCGF*X_c({$Wr@4vTa>w)Q;zga*!hRH&k
z)+5Hrs$s;n9f@w&kOzm!k_zM0anG<QqE&!fVZfC+>g?ciq&wo&o*E0O4G@n!mja0=
zhFlP)#{uQas2&6%AY>KIb;L=JTvq3fyM5S+_`#Xr3VEJ%bF!!=sn^38xfD)WQ;m_g
zAAh2+@Al>cxcPt(@;xxG^@)&j3+UooZ*1B7$Cuhk*D=yL;fFQKPmyld@z~iqn%FQ|
zX1g?shJ9LL;aRXw<Z00`Sz2K*f%_l8c{SQK;ke9z>aH<9=~q%Cex;s*SyB@t7g!j9
z@d`vUK^q}$Pjj+>1_380n%Y%aoSd>cF9Tp@3RRhf4t1StsPi!vagg!$)`2Y)8)(I)
zweboqfrjDymG<lm0<qbpz#-X<-1cy?9~pE!fbnd{haP94M_sGRJQh;!hgQvrZ0kh)
zImqBJ;5a91@`H+Ums-tCil-ID!wo1-Qm^8IB(3ui3(H_<uEQ#t#JSM7!IY5hW6c2+
z4=cdr_3BX;)m?6KvsZD`_g`^yQu4~lrb1rSwBlqjaFS=>1;xOY1`KH4k5d~An3I*6
z5rG|%tT*@dtU!y+CTuoyvb-vF$Iki{c7eKeQ!DMS2zX8!v2iLkjUlfJM+?}<jHpd6
ziK%2MkT*0(Td=p4lLzgPQO-ujFEcx(l$#k){CvXP-Q^4bCu=3HQQzkh-zjCm=CXdV
z3@oRCtcSwT54BF0o1bcXt8L$_ICw=-_c%D!5l;Y_M1*_kK}zvHd$PQl;I|Y{k2K(^
zKX6Xf0vDvEdRpJROf+w6iR{7NUQRkCRRgHa)<Da#w*ovpoH5~H*g!oD!MQ8PBRnFD
z;>GQE?%eq|xUnZMSEdr*5V8puG-sU!zjBqG5q`4Ymd8`_{BWZwCC){Tch#R_y__r-
zE`FTiMb^1vpVe#al1>Wl0dhuMBYnv8A()nn@aqURM-#wpz~hcW9tWArs=%jLE#h-i
zvuQ2xV+ADJ_XEkb$^8_|L{j180oiGc1DtUC9Yov%z8!7ga@}*d6}Xh+WoFrat>$}?
zg_o)|DkTo)cOE|BHdvV%QF47yib&Fqm5A<M$Pg&)N+?~f2M#!Ui;076u^G6AM2sd^
zp8^fZpba97>`<)60KGD+n3Q6_HrfKEgoZe^7zFy^z$A6N61WkkBJ`F3ak4S_$ga?m
zK4)_CZ6)Dm`{vBU>)RTGXw9!fFscS%-`OFx@5SPpM0QPD-xRd4IgiZ+xFIzhUgCI}
z=QVRFw`zTA)ffXW0NygcvMN?`@@z|z233n7+p7)<O(Qob%_$a^Vq>}rBMJ`mKwa=Y
zoAn4Bq1;L(k5wwt@Fy<#PDOHB>NREaDaGs2yX6(}T;gPzqUeYnq-n`Zf|GJfv|=mQ
z`;0A653ovNbx6L9P0GrSs@)yBD~iRqpA@*UnGgV+EVc23^m~G>Df2cbk7t1K^O&iJ
ziyDApPZ(bc;KE!0e-Hqih`>qutc)kAu*eP_JjxcDy)*~x4eAL_9&R+HOzNSOf)n7<
zesepg6f^ya;I#u)eho7gh#IX)2jbb#o`g))wRD;^;JbL0iEuVQsCZc<ePc?}?`t{L
zu;)RzEp0Jj)nxSL3^;!3TNWMk;9LN)Cp$RLtzy)NJdM$43W7oNQ*Cd(61CdpD5fJ3
zT<q>_X|K5lDQx8P3N~SG53lMy%wq2vCrwbN^!O#QGIc$*q(|Hh#1QzSHq%K%zwV`O
zBpKo&g%;R4Fs~hdJ-6c(c`2G0E13oOnX-e&1OO+`%u~%}$Zx@b8LgZ&3>_6OowgrB
zPI=YAEZ=GwHkN5rAFny7yY559=7o8(X_{YYkWElX%LZpXT61iZSHylTC!601qS$<`
z7~rb{fD@5ow&I)O%N1#x-f5#aG3w?`PYRhJos`;y6A;1wH*oINB>PtOP}&un0S313
zK=8Ot1dk%Ti#RB*W*zs#A!<*K1W`$MOCu9-JHv&iN1|9O6hiKRBe`rid<)QT$)N{4
z3_^XIopS<)b&}Gq(hg2m=f?FGzg2|%CoLl1S=xciuVYh)=$44?MS9p6=p6y{8X|f9
ze}L(pk?Z^<i0Pw=4*J88&SGt>q<dwka6q&riz!R>uu^XiWC3UmP{@Sa9)d62eMZsk
z{{kXg6C%ovatbY-1iygmuR}#n;VnSdwz5Ul?z<<dZAt&F04?|+Ee1odkrcNv0(YSC
zB@YwI;>{v~+y=y(a`NpT2SHPt$L9zVh3t@0Vwdd)vk*x7MacgtOj{)IKZOH69nt`T
zx`D<k$ZNpP<2iN`&yctcr1v_MeA!hf_(1khW>@N1hNo@;C*;SOL-z9`pueZs?TRrM
zfVPhTpPO@h=FAe8ij)7N0wiFJIQo_bD)J$4%5eVs*!%#S23o`^DQN8d44ceRYBRNg
z^P(1&0Rjc!)VtUSZ&WC#c}o+~{Q{c|Iglfc{t}zJlM`v>7~MOd`)VQg&6mt=zL@xA
zBPTTWRA{vgM|!Z4p;Zn*W=1$H<9qCVCXTj{#Jm$1#PGa{LFOko{5fnskIffMfLCxt
zFq!c1q6si357|@#5q{Cc&@^>`pmO1d;C1D*q6jK=K!KQqbIiF}6wb#q=ORb_GNe;7
zk?nU~ll*rzT(ZOePbs4yME=vdP;trM?n^VD(#doe#Urf`dtWgHbpS_t)I(~fMBc2z
z(<lpu%2T5$o%W>MPyA3gG|x;oM@7A#tuLM^CjOq<y-{q_brF}=J$n)g_~PFQ@_A0?
z`cTXsfl3$Tv?{rHw8?BS;U5aZ(6n`6vk*U1Vvz;iCIC<267+})Lp~!;6^Lc(Zi26#
zcKD=Gge{9CImLuDj${#%OaX|b39P5LKzV8TsanLa5-Pl~WJZeRBr5%4mrIe2WjPME
z;|OqIJU}$iVDc1|FtH{-nCAnWIQcC2{wui2YDnP~-J*e$yw`Ck{Y4fBdw?`jzB6ea
zPM?QYr*rDj2`e4q1yH}XmsEiiE(1NuqPV2QNokJtf?LRs#6wXOrP0La95-MGD8E(M
ztmdQ}Ya3Bi>h0A=f<TvGm!hhFk9Vo4c0}9{Os0+iJyFx2n_jsNxx5yUmLDe@8qCCc
zY}*i1l#i`wFMZe?!sakGnY1AFEQ<3*?~`O33RISrhZ+IFBPLFrz~*Ej5K6rSQV=hc
zN(xT=ACZa^1(e&9#`EN$8iKbkNcXU`4$deZRL0O1uZuU1MAi!Z<NHP17Hqbflbe8p
zeTH@CIT-MPsTpa!@(({TQFt_LJgJqCB6ktUooz}E^gA;fQ|PbI0O~lU_!|yc@?fO@
zRq#;JnwWm_NJHSo{SMGyfv?$cYG!74S|zb`uaM9NI2_58`a=&2@Yk?N{EKaFTg89r
z!M%aj`U%l3?SlG4@~QN+Agp_)7GBI~p^1;lQ9zaMhQpw$p-|^I163{fdzvSU*7!Fo
zlU7x1cAr=VP2$yYt4Eqm;=8=4|0+3v4AGS&-ca!dFF|g_>K6v8uT3cqPSzEUYi;Q}
z2DzC9f*&`mr8&X!Y{XfuAOGDXU)P1dl_ncg-#RytQc(vyX6Yy$nK>augASt&A0^v>
zko=bfhWf$}^l<W&5<v@0pAgrHWK3v`tjZ3>Qfb>`(mIV=>p>O<u^Hl|1M8Ro5|WKc
gX-Hi!;3T5bP%Yr1M0)M!nz#GjyzwXTSHPM70C9;>!vFvP

literal 0
HcmV?d00001

diff --git a/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.rememberme.InvalidCookieException.serialized b/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.rememberme.InvalidCookieException.serialized
new file mode 100644
index 0000000000000000000000000000000000000000..b4f3a5f6acc8e3b98177c470d27a6a4f79d5f1ea
GIT binary patch
literal 10861
zcmeGiTWlRib?hWg;x>sB@@kScB)v_bQ8!MVXX88^+esXpIQ4Z*X+zL>@A!J-y}O&;
zxv?Ek1+*2SyxJnQs6_>dM*)>D3XMP@KAH-NA3*8{A0UK;Dv*$n_(KZeoSE6#*~h)U
zCJ{g6XYTCGnRCvZbLPxBXYQMSCrhG`Jnn~8D+)r#t4@Zr#%BC*+KQN64;?;d&9DiJ
z*7+3kxMNf9_?{KA8mmpPu*R$*?<#ejO26+<J8W>)W&uLH_^p4uv*mj~pKd2)HY68s
z1OKQZb(Zy|c+jNi^G|e)*x&e_Bz34MDccX3)d0_y#gBLY`JU>S#Ixx#y-F>YdR1$*
z4jZo}dwcy89j7|?KJym|_<;mav-F#rTaRu!yycx7#Mo5m&(H~%z4z|Eorh+w|9TNw
zJWQ6@v>q`|)(s=B-AHt|hCDn>R#X_Lj(e6x5v>B;8UwD(QEP{vBApSZ_VidtZGd>-
zsT4>&G3bIYJq{?>M)e>F0U@hst|Lym<gz+<+}*=Y#1GE~SIE<(lar-2NxdG%$fa<~
znre)^{p7>Fy*IZX!p#SSkZ*&5ZBB%gTR@lJcy-7AKRnk?mYpCSlYUsEe28?qj>pc`
z(a46$D%+(|H0;v~3(tXlB2P<)$;t|Y3EY1_&a2U7la9*_sLmSWQ+_2i;#cY^m=!fK
zGS0#Xj8`C<4cZ848|7pX4FXP1HMOg<I6Gx^V*0_#6sj@{9XKA>Q0HST;vnPQtpi&q
zHqeSoYZDb(0u93nEbZ$F0<qbZz#-X-+;(wt5E*nlfbnd{haP94M_sGRJQh;!hgQvr
zZ0l6~Il$mB;5a86@`H-<GPRnS6wfG%M;lO_qF%)XNm>^o7M8)zT!&ROiSwavgDD~1
z2b%*Z9@c=#>(!$ys=M6eX20U5_rK!iwB(hOZH2t3X~oHM;3Ut$Gm3#74H(e8pQJVz
zFehs>BLX`j*=+9XNr4udZP;w*WOY^Qj-B%>Y@E7vQ!DK+2zX8!u`v{z#-LY)qXlea
zM${%(#8k2r$g7&89oXB+$-Q>SC}$%RmzkYX%JmE=em-pO?s5izlZ_JBsPA)$Z%A3N
zxvWnt1IuY3>%lPeL#@-*=BL`;dfWFZ4qj2zJqb>A#1lX!5#e6CkW#$Qt}JgR_zlI=
z0}XiU3!I@^;DWSNPwP8%j^EM}*@wOToODR42CX(*1Fgp18u0XR#)OAq{q-;e=dK)&
z@Q5sm7q{QKb?e{Y#vZv`nNEB|$R=IToOKTT%2jq&_{lz79#6^h{f(xSIF~x!Rezdw
zbFy5x_z8*^S;w9OR=3q7ofO;y<gB<xdXeWNFfAA1*D-94CxE+v$32BS4ltKhflsem
z#OJnV(^}vs3P`pe1d<z*`ze-*q{7KPveOs`IN|nNh`0-UJKDhIy612!a4E;j%(DGj
z&G#Y;FI8()N*v7Z0(`=4ur@QI<a)0Zk)$0f5#7CzAyDc`C|#}x4mf*@iGyviS-6Ho
zlqOe0fac4v4I+%}P^`uPy)vtqlw!X&+5)A7hB&nt1o~nB6m`53xDlr!^p*f|vNie0
zuF#S`Z*uc>CE;fK=FG$E+Zuyt&9C#pSv3Ir&JL-4FBjJ&vTM@%s-T6<1#HIQhSYF)
ziQ{FS*UY8ds?DiYV+_0ic+33Cs#wX%lPyUaR4syRuR16+johF#r&(Bvjp-_kC^*mq
zb;0{=*CTL*ax0ZQ)~QItpB(p{isZD^ZOZ23ir3?}%PZo!#K|f}(GfdH(~_42C*_uC
z#a6EO8C#$pV3ow`kbD`Nl$9M<yE}4Q6pL{`B5-3fDF8TGY2yj$^8{Pd=50<M$^hf%
z2~!UjH2}q)FuoMP_<R7r7XX}yz)AY7j3=qE$POJm$`+cvGzaVr=m}2lZ#1P$>b{hM
z6X4Q8b2~$dnZ88u+JP#+h8YV)jn<R{@oZ>MK`!cAI!)^LUA)RfIGZ0-yeyTzF(v8u
zw47?#^B~-owwSPLGWvW596$9fiw=5VK7iPh9bVv8G3rB}#%MGR!Jzr6wzpY{TJ3Ta
z(~$@+c6Y9{-`s-~Hu8A|n=rSBm-HUyuy>7<Ca6<-{JdD1x}I9nBkl%b2>el->7b!s
z_fj{K3~`Y{3v3-)(2l>7+wq#b6itkk%mVyO*};PXfRiT{sOB={w_w1GR!$p+j*6E~
z+Yce9yy{?<Z?y~?%QUJ_)ST2^_r79te1UA5=2seElN8djfjN)X9NXj-v0ux{=C^_<
zHeW6V_>utNM5LIl_@?-BMcSr!+A2<rx_Q%+LMBKjr8eONMDYJ2&b^dm-^w0JJ+T>J
zVEZ-%kGn+hD8jplgW_t|Nk1H<_S8ram2|f>G6}acTzGmUinT%^<PJEJ%Z9@@0R4^}
zdceaV)VJArCtz47DfN{0aI!u(uDAHLBIG}65&5H~J-GZeYzh(G5YfFz4;ur$Er4D|
zB(MArFx@e79UlWReJIgEUl`Iktc{g)uM8Cqh_+-gWu+cg>g|Fo0IdNEnQ+@f@P)h2
zD7yV$KxAh^MA=bJp{3K{7jXS+P?1x33(&Q#ZBexc?ucqz(tj&Ji~f`rgCW>RirW~0
zJJ9%&hY4lzMv*{n0^)5s`SwkKpsCH{a|DS(c1S64ne7L25J>t($p0x!TO{y5h66qm
z(g1?G{>CfF%fQY<Id&4ykhl$`_X?DJ8C2QpkUf;yl{yyUsawDa`C;ae{j3P+Zz*<{
z#h42~+sA;<?KwVkW{FG1$^StC5->&_eNzJ!`4Bi|IR71NzKcx*E#j0EH1>XiP39=I
zncBd4QH#m|fdX*qr`QN@R4AwgOB2!k0-FpukRy)%5}VtT6KUlb-8rDUY9V*cm&|Xz
znD}HPCp7j{XtfJRy0DR<RSrOAMmQ|vd+dEOj<%4*f)f|S@U)3R<|jD(X>2}&&1X%3
z7jQ%{negze2{11Y*;E1%e$K?uG<ATWa>@JPb>*|72r6|zftZAI%(+<<&WAPUB1ioK
zq*F4H?Q>m|{5LgRvcvyRDWf1n{?ocpamiorN;99*$#fURBdrg6Uo-`E2uHfqLu#f(
z-mJpYC<}(lQ==)J_N3fT{7^W!z)UwsMZKSGE}keR{;t}+QEbz75tr6IdkPBp;@=7K
zc~0i~P|O~IN*Cm`D!KSzli6az-xq|TX<LlV68ubwMHY0M06d0E&?71g`HVPKAeO1S
z3BG>D;ZsHtwk(q56cf@ol0`@|1t5|pu%7M$<)!7PY7xUqsPMv)87Y>NsPv0nu0%Fg
z<v7@lBfx?20MS5$$x~Fq#D@G}o)2*1<Wu1Luiz%DA%$0Tiv~{eUdN&I7g-$a0n$kM
z&ZK!ba{*qR&Z|c!taOMMK>gZYQUy}D4D=+6;*t_4rFqs1ZXrJs4@FUwMiZZN+<+aR
z{MKQ!o|8_jZA4M2yIUIx0$qY#imLt{-ld|tIO2X_GIb2-iJJcW^vZR}<+X^k{5aXt
zU?$dM+m@K3d~8K~>BZ&<Hb=3^qy?#GQJgP&pCr3bpt7ty*a!$7F>&e?Hm3`LQ0gU+
zf_R}+QgGt`h*X>?pxmA^o+k&?5WIasx`(B8a7OW<GKOXGx_IMAWTVhOzF)NMz-Fg8
zxeYitU|4sagMJ^Fnw7>Y|L_wNg-652lUfNWau<Qzxu)bmzq4~Og}w?6ppH|Dzu}N2
z4@UZ51@{%LiRmYgGz4DUZvp)^_?iu;W_IpTt0b207ZTb6ha;I%f9OF0{t6a}f3eMP
ztN1@XxHr&RKPtMV9;iPgpGr@Q!n$W_;n|E9n)sL;1yt!?I1H*93U!XNP}PFJr+Kny
zjeoN;X;sB$4~S*ZBwii2daT(bzRQdHuaX1E5M4>)4Ha+j6698_K4GBx+LYqpWK-d|
z)|S3wkefLm_z}ZeniDL~MV!_8@ZU}HbzS&dX|gf(o$~`J6)lFxEFGmIGpB@T&|$RU
zqhuQplK+yxP+$0gE>0d(B4~l>Q{p<2j0ugAb=jd<DsB5rT4zveUC6=!HiMij#yTc|
kgk)<{8dBE_IEkn<SPQr)kzTvL;jP{`UjL)`E8y&Z00ZDsH~;_u

literal 0
HcmV?d00001

diff --git a/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException.serialized b/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.rememberme.RememberMeAuthenticationException.serialized
new file mode 100644
index 0000000000000000000000000000000000000000..fe88d36cd4b072ecf927af8daef6b9d6ce98ee08
GIT binary patch
literal 16357
zcmeHOYiwP`5#H+r=K+Dd6Ouq4+&pN?iStfK2pHQ*oH`F;C%i)F@x5#NB=_EPbI#tx
zMis3JNF{332nuRxMJrJReW_JJg-TU_HK<bmluG>IN2{t5id3mmrT(j$()o7x?Ai0U
z_H|?B56+Ltxx2G7voo`^yEE&b{)62T2JDO<3_D>x@M^<Dfm`L5{NTJ3@=_!4#F%r5
z4?1o`jPRQ9O0MwyniKFUuMYB{%AJ$?^C<63;Pi}^cpb>@<;U8Om%jg}HpWH+ws%}s
zB|qR!6FRGAKGN~GTZab}ofYTYi>^~~Ys1dT1_@T>hT-c^w;!6j<GD{1;-VPQVEpm=
z>H{nGt@>RCV_+okFS&yi{?P|JH}1Xk{vT$rnSJb*lG_NmU`zTyYYUieF_`=M*t{|q
zu2(tA!_XZjyoDBCzkpWvJ;~;V!Y!R22;353-2G$%CF<y@kTPq6NG=W=^?E=AdD%!E
z3N~L2YY4BhrOyk+zR^0FPfgMDo!;XHx$>2;%-8?(Cz#>|_AHwLaI0W5he*;!5J{jk
z*l$FOBxpPMx&8aEuiJ~^b;j5m#Aaoz$;<$E&ehj8?E3QyZEW_#tbNE2s;=l|b1Pnr
zA8Wu<`q&+%iW`P~zFX$OF>*2p)ZWK#FLUaElDg2ZTW1e>6>ee8t#UEqmlG|1xskw`
zSCuWNc@UD@NkXIb0%L`K!DhJix?qRKb-sSN0Q$AtcabY<QvE#e+=}-M9Akiof()^x
zbz}!>Bhyvf>R{O|k{i%6D(>7-ugl5aK@zeZkamG!dmx}!Bb-`^?CI464{C138Rj(}
zxWW&dsuz}=L($J}PAdlOf-TE7YR<FuXl`>nqB$OD!g0i{l`Eu4=Tyjpesac&$IFJr
ziNG(BbAs<Z<0EJp7Sg&fqfhd%Q4zK@yR<a>|1W6{D_I3wn=6a%){@L2NwNYwrv=#1
zL;xfELAOK>EZE{yi=+-BtL%9_A;|))1Gq=91;fgA{Fq<nr`<}!wo2O-i7!|)F?u7{
z=&23U(jqZZEqapkA}(nT>@_3NMtp4&?6y+CUBQnJp5vv2QQl9X;^$_2cIQ$Ef-P6H
zPWrx3^m?@i+rv8LF!G!xy6y=AKQK03VE@$9TUzpKWlwG{m4g(|j@KlT%|wQm1>h9T
zbADPj8~v)5>Fy>nb=JM!YP~|*(qG2jiFN$0(TMcu-Ga3%t`@IC$sjGn*CN^uXpPAT
z!@C+mKs$gAJTfBkFdEE0rGFI0?mJgLAIFA(4^_x=QBdIJqcT)>medN}Mg!Wt+C~4o
z@iYqRWJtlb=F;ir6+TQcsy3V?q~^bNyl$hE1A@(wyTzc3jkA60Zl}Z9uHqeWZ`(uM
zm&e;lGzG;_uv^tfOb&W_7@*6<%(hRZ8YvXRWak<+PdN38E3o%CCBItrYoUXUl1?a6
zL9{2FqMsDJ7pGdZSKX$xq<BX<M|9q=Ic<+Qoom!Rip>s}>(Jq&v}?$dks94g`c_9J
zIyI!5G`m@K1W{hLIYnXUWDA^P9&(Z4wB-j~Bd%8~(yI5$(u6URV5{RF=@CZL$82f7
z*TTF7uVJ@!2IvIlH$=~<ZlHOmoAkWr$XyNM+Pq$tya4(E253Vwc-V8X_hv0~HZy8v
zV$=YqMN7dgJ91c#6zqwXG)<<Kr`g(YkF+$Tfi}<cpcpyRMQYJ_WCyoG!D5|hq1BWb
zsr9i$9}N7V)4rz{Z?VJH%~M*|hi+6>&^aU69h##jXOQHjV!B}cE%A!H+{`obK-0j>
zvDbn9BLE36dq~gjfg9qOPy0Se8=x!^1iQV271CLgV#Og5%Y1zb89xu$b~s}Yp2nB_
znLs!_5yHn3K`?pFQ86nONy<Dd1s;~N1GiU>i?43eA=q8by0lB(nJ{pST-;+%r&kNp
z87tldP#xEB3!y`vGvd+lGboMF{jcJft526-!OkO3pV>w&%PbWe&E^A5e`NG@9$&Ol
z<||)}MYRRJoI=OX3pPUcL<mtN+c(Ln;*bWJ2HfyGo!#u8dU`9hs`V^S;`R`F7kOo@
zxXTt%DI0S70QJlqUNUpIgs)M-#vz@s<BM{nVAl53k{vM{+NbfKo=m$N_>Ed(M^YzJ
zaA-lSy_1^pH#0L{nAM_9QLbTmrc<(De8Laz(VBQ{l4kCw>nJ%ecgu$@M~C56(Dnnm
z0$%iRb9Y+CjdU6|2CH6Tue+wjJUvM<ZTBm7^C6dRQQc!Tx9XK_SwUUi`4hVNP%;Jh
zdOpH8B!Xb_M%YShiZ)m9wxiQ(xnlIro9vW20iT3uRmmAZy2O?EvaJ1~xIJ<M99`d|
z!{cUoc$CMxP>|uO&OtxuaZ4k|>tWG+7LO0n?o1n=X$d2%xO6<O3-Gkhl^}nW$ZyDy
zCpw%?<|Tf@t8=6^irb4@1zVbFH&c8ykN7(+65m$bis9b@$R%`DMv!lhkMy2I`WBF0
zxe1h}j9vTVq^3==4LXCs9YemWXukR>Awj1tmHW8eG;8zDr&|ELfs&K7+tc9-vriei
z?cc;?W6VVRQO2Of!xR^!o&}qw>E@6tEN;=XyQjpoE!n>nq#1urs=-ohsMKw>&>m?0
zQi}<?cr#BS*NO1jjD9-@NzraeMC*ty3h5?o#MvdkK1K&gxnZV^SNNB7?O%fLJG8(r
z1#X=VbzRLzuvbZ(^%-&E$PkAO5PgNxxcnmJXXy6O&o4BP{B|oj(_}wOEwW$dA^kle
z?(B$i4r<!~$+<2gXT~itRECGQbBK^LqV>lHDKCc5DntJp06zq1VnuW*MdM4RIL5OE
zkbVV_LLvj8Rc4iBG|E-fq_qi}zsX@odPM7Q0d7oBv?GAX1hIC?kfzPTrrnoK?7p~2
zrB6=q)5OtgGg{=4Sskr12<m2p=J-rK7M-@hV$v5E(E5^1LETT#{4Bti0ls1*TtQ3f
zT>n)YVL}<wR|yb&!KN_o)qzfZw_KyBtLkX-P-zYnpd^E1Cd@)P_ZrE+hOZatI;AeM
zot28s{s#u{v#w<*;uC<@l?v=@)7s2l>C|->>QUZ@ugkWg_M(N#in8vRN|BG3;c0dY
zrp!~bE_3Zkgr8knfSyU-bTeFZxoc&9M?UipG;=H2X7VBxw^1vNPy%1RI8fCzb=Rk4
z_HoK|(VbRbF4m0Go6q=1k}-io8^8?wOsGXAbjLxsA43okHHGYrIFTS$S9cqI=_OB$
zSV`D^c}X^vB*ZS|9PuEqOh_4}$UAb3m(-umMf7Q<QiUbelCP&zU@2#L8^oBGkzk8N
z$j@x0C5Vbvu@KARQdQKLm4g&PyOm%UFv;P-rJ}dv*1fpACMfk6I)eOxu92$FWW4Ce
zDXKc1&_yR?I%L7l6vvA?K}wr}>EvOQQWC5<!FVYx-H&9UC=8QiqIHf5lyE>TECN_8
z*j(f`!m!xUVVnd=XK9u)t3SoF)LdtV!mryxJxKgyPJd#4{SCUy8x<M-3AU<9Ph`i!
ziil$yl}7(d9P?|V$EX-~QCESY!l<fe-qoy2D}R>S&pY6W=?l$KsrJ=Sz#8-)$V1u;
zBqoa-vhbaUMD<W0^#B|M$RNRhMVg*0c4~!s(d&@17uH=-8nG&!-MWd&XmoQ#mY(8T
z)TpO6I~o`15KNZKIc*>z3L617*_~@ig5B0a$x6`WlTf2-9jK>15mTx^Ht#g{Ot3pc
z?2e7gj$CDQEaK2vcI%W9Dn`F)y~edC^Pb?&yfG2~xZV@h+83fmP782!Y@1V*Lw89H
zt)O)lcj>1*P~h)LX!*!(Vz<XLJKBQa_>aoZ;&w`9#6Pv2W(19zZH4DkRv0H-WjMg3
zJ850%#44psj#7e*Ua!?u{u>XhY+l21vU}t(0`UfcsXjPfCrbP>m8|tZIz&{81FM#e
zib|ET(<vR)?7&JLg00AHH`X%S6{Hy>hF`F}WqgMHW1-;HPP}VUg?bsfmCHulH%^SC
zO*E70V&=dPVGc>vVAU6}>I)A?O2y7A*Et=_?$;`4LFhwrXHtSmi?Jo?rbsJ=MBV8K
ztS0wZa4j697l25Kk~jfd9cP*JPDMc?EcR6ELS|c^d4Jiv``>!~FLXZ|ty4j2R+S7$
zFB}`7IgcjthIx%qkX3tmhf|MQfU?-0^o~dnwiI8>0G8VbMpCu{eJcSHkEzsQ63ur5
zAnvj?HihTVB4t>IFL^vpP)I+=0@iwqLfaKX0l|-L0=U;g$UL6{LgG!7Om9gUVhRa_
zb2%&=n}vEF1*{H$tpM9>1fD}7@e1jxL69ojjh_hwnZuJp#t3%pF7reQ6!t|jsL+U}
z2jJy#%tZBMYPLICCHj327#s$WIe;UP3|L0{(JW`thp(dmiI)YjKb%0{BN>D^`Jo=2
z0O6F);$^f*7BRx3Hp1B)gvV_Jb%+MmlK^J`p0W|lU4X@p3chF~#11ov!P!~JvxO8=
zW;wD5_hDQLVaR5&J_jN3utAC~Da1l15KbEkO%Ogd2&&|dpH*9i33EIj<xogmXfEd<
zm>mKR(>)PF><^#aGz}CbBd0WXlf=R`qsb=4<PRr8FjrPx^96pwSXDzI&Ro6}ISeAr
zlvNwqJ2H%Y7Yt>k;8lF35Bn|U_oq&#mMFD^)QaFO)f}i`3dOu-^z?R)o?1%X-{gu4
zl{g{k&jEe`@MfOi*Co<txzN>;7Zj%Tbd%k8+APxrK{^jlSkK1JowsWyw$<r^Ad`P_
zC6CJTh!Y?6jG|OQ5Szp&0Mn%^Xd$Jn$(C2AwMjaZu6JX_>Xy#urnbZW1HE4dFy0Lc
z^4>2k`YH7lSO!5A&(PNfFe8I7^+hi5nH8PzA*8t@#4;4-*a&8tF+y^h=Js7^QekSb
z1O?IN14xw_O_GdMJVN^-fW-hyA_3897iQ48%<eoZN8V{hnpy@%s@&=-blwGEI#r<q
zO{)Rc0IVgDxv<>y>I5WdQaG5Ps(_K$m<pc<NYwz)<N(NOpvgLzEL35u)FYCHg>8vM
zJX(-;EbIg@X;G;6c{#@9wF@Tuh0YsEdV|vg0J4OW@RTvhGbbkuo-HJdLA3_}C8Bsb
RSScoVY9So1OMXX2{|6t~g*E^H

literal 0
HcmV?d00001

diff --git a/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.session.SessionAuthenticationException.serialized b/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.session.SessionAuthenticationException.serialized
new file mode 100644
index 0000000000000000000000000000000000000000..5b627fb9c7a5b8ec33d00805b3af38c331b5982b
GIT binary patch
literal 10753
zcmeGiTZ|k>vG;7B?Q{IZulNzi&g4w6GCuqKj1Sw(-Pt~K_Bpp_15OB<o9)}1yV;rX
zOz%Cc5Fwd_hXjcd6r>16KqMX#NC{ZjLVV%~2_eBpKKS4vP>6)Y7k@}5RCV|C^gMQN
z51TK%AH6f()m7D1)zwwi^P_)|Wl>13_+ibAg3$456QNb7vwk>jM$~SE4x2Y;>9}b%
z*d+CsV_VGeJs683{I7`ra%yyN&ZYr^{pr--_WkD7m%2L$nG4DBmPBknq-GO5JC;7(
z^Ose%F@a~>lr>|SuI1It(FU+or;6a4pX)r^b?C<X0`MaVpn~}A-CZZQo!Ifq9K_gU
z=+9c?E`9Ia!+Vd<-v0FxvUHd%v#mx%8QC<9xb`E_{R;BLFj-xt%yQfdAO@=ja2qtZ
z3PX9Gc!qRE%(AD)Ldyn-N1jQ6!~=sat%H04<;JKH1R)@#RmFA0$T~5t!5nx0uoJNp
zbHO$80$It(^17hj2xH_zI2A=TM&5DeV|{&h_Z-K?2ZWHfK=s=bA>}4mEAPC~edG@>
zc90dHAe|F_Shv^^>2e*9UToCIX*f*Q+O8Ev!@gCe;YF|<<f(I*tf^8M!1edzxa?gq
z;kZ<T>Z(&V=~q)dezlQ;SzYHnS7?X^#}Um1B|=JLj4ZK&fRVE;?W)49x*~14AFNEG
zs?gA}T<1FKe2hj6WW2w9U=zg#T5+xVc-1mM!>~7u!-s=_FLpI>NDd*lYZ*C)3_2db
zc(&ui6QiMLxn_-eG_;r>nsq0#&9m|A0ENwf{funMcS_1D<ZP-_JTEDpY(jC;@~SRK
z(!3neumX1GI<%@tTnc>~ObO{e)*3+aumMb7%^syu!(}=*M<h3W{}ngq1h0(jF62cH
zOHNh-CwT^LNCvu_FraupW7%N9jBL#GaO{X=o4&5A94$7FVzZl(^);b8deN`aE0){P
zwbJnlhi9Z28$+>a40<)#TEIr8M=o-8OeIT!yrDRH9G|)wdB_f_#puZR6tz=Ixt#&U
z*C+JVO=SQW*(z|2`aTo*hNK1S)5?4rSWXjJ4~C&1DxI#^U*+;P+rC$I@Z7N6GvHK5
zJPxE2;qGNEQi|8PF3Xz^en;~3NE4pQfiqMOT#%N0Qu;oqqq(Uh!gusxMmhym4X9)*
zpmq4P9y~qlG45e#e<KXRxl6~xJtB?b$>c-$fg5{rsydzchLBFUpt;y7(CP*5D$BOm
zp$B0?r{m4|)5_Aosgr%seV`D}0Ci~%e3Vy9BNFT1-D+3~rH_%7{InRi@J#GHaMbKE
zdxgIP>K(^``qtz)iI*S<GO|iMB<N61r?Dw3pV{#t7bCc0RM}L+bC?;p7Q?g0wEcSB
z_aYO|Kyy?G2(0BYyn^%InCX#L^^lN~pdHH`y>p+W)SFP6Y6K4WW|Q)LXwo@2HF&rq
zW)Fe9Mf?K+LAFbhTOObjrB$6$?1o0$pp?+yn+yXfKkT2h9M6DV?^L-86Cg%*B`?_-
zO47qRH{WVw-HduXyc>hy%5Sj2IoSd0&UVRlujHp1va8d2jnl&BX>3N}KvQsd=Hl6#
z*UWRdS=&>y#wcuBaBlgTH9nJ(t8GadRLuibuQtdvjohF#r)g-!#xw&x5)SlWx!^4J
zs2<o&xtUTPn`B_%Ph9aGxp|EqT{fSUyq>;SUJ=h#M%GG-4qri<mhkC}RNA5yTe(_i
zY=NqSRuij3@*~)!tc>q#h<!eOPZW!BKZ)J^6d30KjI6P7hm<|eR^k$IoAZN01I8JB
zx*ncY*tkac;hqAxvJk-UIRGO(&JjK<<4LMCvO@>AvWaFd3>TjU)Bqzpn+-{mdN`%v
z1lTyHFK0+HQ%(f09H{hbm|#GVXHGg0eunlWBz3N-vYLM1#gm6epZQM7%W~lx)!~DZ
zeox8C!KW#Rj)g5Itm=$@H3N>Xz78<35J2q7PAqb%7^ERjV^%Z`v77!Xm$zMtTCQ>w
zvxmr;q3*nKL}yV58~Lnb!_$-08eUavXyDTfBP~#;^!OD%lM(HBYD<r}8aSu%PcEj@
z3jKzcI*~*~iWJ&l>-eHp{Bmx^8}d@rF;+7Z@HHjF$2b5ZpI)SzE0B(Y0aL4bPBU~=
zyl~on2r1x<gGssBHf$`@s4-r5QfJ)<l1*Mq$wV%#HlA*N#sHnLAd4E9_pG{O>%1cN
znVf8X$BAOYw^JVAYaD<Po)Na=o8rS2Y3tr;7vC}R<V_E9ndDgGJAyl2&coM}WLesS
z(HolqhOW0Dc-+T>M;_iq3=~&4&-me>WlxR-k)a-qkqJ1R;lNWpQLGgU!sCD;D|%ds
z=<fjf?i_l+Lm@J^=_MziSk^FljRTBq&h@J$exnHaPuoO(&^Un8zllvDqC32%^LlHb
zTO5dc79L;yk1^dha-E+6F?}@AK{*Vqc`Ria>Zt++35d2t?PHDVmg-#xSpZtYD6PY3
z55ZS~E;{}NMD`{`q#flHYMcYVz~u}DG>NwWU1?*Rsy%vNRNI#R+W}hg=d>6!!A3&d
zS`VCo+MC!+D2um>1acP;@6O4$JPv}kY!>e$NEEVNQi&^UKbVI=(l0{(Pj1?8<Ip>>
z!DmA&fS|6w`3&+pu=9A1oy0RFZUd3N1{GR51N9lm9xC)&11s8=TfhnVab}a<Dgyd@
zirp14<^s@;G2nAgj?bJ~;#BS)zE^+*j1hZ(pn!^YKI}3a{|+|a#iofCap-Mq-ofT4
z*kpWWN!JFB-z)$E1z_*bu;JdQP*97OCZhX!0XdK(_WlB!dy^BK2#90>Uwhwx9;k&p
zFkiB;`C=lKjhxU<QxWk#?9oE29DvA-uv^6U_%s_wTS#Kji3?)5u454S33fk^&F8Us
zK?isRdpMH`4`0v$7UbdO0t`2F3@uX!i29a&0A5$z0`j0z1r&&wJI9=xMd3W5=)Qzc
zUxIW>B(i1K)yaQb!6hsF|CBNc;;-1WFI0qn|A92~8JkFVQ9Q!>@afCCppIh?l-BsY
z=OPl#W?3*)o|+A*v?t|$jz|Uu7nzXfsL1QC?ZpGd#NU;~wPKs9i?~+9vnQc|&p##*
zw`n5RhiifnsB}S2E0c>yTZ|SH{vjs}O^IMr!q=2oL_xO&z*9H{J)*>r&xlh6Vv)M*
z;G1V1HmMb1D?CY7H%aKbgmEO3kYtL>xJ2GlpuDvFWG!M?3KecxGCjp|x{M_GD!Y)4
zRXGm!bAaN?R+fYK(kfwMOLA2ecjoy3L6GOc_g}+B)<O#|y-h1{lIt}FrN78zU=NT+
zihCwyMdvTWt<xoW>4cRIeqpCB#|>E^g~LD%(kLz|F=8w*pK}ZO5x*#kqBNR#pW^~-
z3{Xq!vDv^#7uGhS$mr=&MuI@k!76!G|30r$Qe7G`upaqM1JXMM^mt8wVS1GY<nl^H
zN`8#&XfhJ(v9vX&*a26g{|1W1ccT~KGHgcP0>u}j;y!a{vmq(`<>EZ=K}*bJJ>&ux
z`%V<VBRJky1hfx<$VqHYH3NeCP#o&VhS#!lm{6bwERSDyN`X4@*CACW3M^(%YB!w&
zvJ0-!AalejJ@~b_Q!Z^qJTI0Z64}bvWB?~6ybmdL>w~+2gQMC;$#c-}15<NiABazV
zVxn;W*nCjwGez!MAa}7PIWU#E`IthvY6VadGU9jGugTq$`kvt7qB$}B<i01qYu|u(
z<gfwf<`0?%pL&E#Xe;cqWJojnUjftn`?ZD59>1M~BM1%uQ~c5Bg;GZHD)qD^Y<RjB
zzL?QM3wM>HfGPzdJ7i%MN+uVeKn5SCd7}P}A6V(MYJ9PHjF)<$Ne&3Kl~b(-@rs|9
zlBFC#hUk?N$0~V)OC`5zmbrnd6Ih6Yk!^+jN?Yo<LT=`P;3qX}X-%*)A2C`l<9AKs
zqMo~MVX`sxy$b_L6)lB(F%|G5GiSMIaMzb`*OyMmLdBDJ5G4s=*;7&kZ7_Y7pG<-=
zt}(JH+Z9WtbV#Rlp3_1W(7Tid7+H!XQ2+_auB6H&PbzQ{kug{g7_YWozrE#V-}m4A
LBjiVO!Q6iUqs1#r

literal 0
HcmV?d00001

diff --git a/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.www.NonceExpiredException.serialized b/config/src/test/resources/serialized/6.4.x/org.springframework.security.web.authentication.www.NonceExpiredException.serialized
new file mode 100644
index 0000000000000000000000000000000000000000..2d1621125f36c3fce3a49c12fa5cc403b2ed2d4d
GIT binary patch
literal 16338
zcmeHOYm6Ml5$-)3zrbJ{zpxE{uznDS@%e3IV>s^4_BrPVzOxBnOy+j`?#ABTS<m$P
z?odQf04bnEu^^y?L?{wLke3n#6o?e%SBxShQo;{@@FP(a30aC1DN_DLaY%jLJv}{-
zy<NvA|Ka?jJlkDeRb5qG-Cfo9lYg+A!hrSp!H5&q1FtqR9Jp0J<_G7Uke3>PCnlUR
zKIFI!G0JPgE4jk+YtGo%m~+gpm3Z%X-3xfRcf7>w==tMoAJ+eHqWDM$W8(qaJ1O0g
zA8@BDLD<k)HS^)lzui1CsOYRX=U#N3id!3TPBuu2D)H3}Uw?Aep?N!={X`+&9wQoz
zKV4mYV8y;wzs+C_jt2giJ5=ExeXw)m-m&+8KZDKeXE&AHM#u$Q(hpi&z;uhj+}F?M
zm$`7g%26JM?g-&6vhW53RJiYPHZK%z>HJ{emI&jn#}g<~M{k8!Nu@+`aoDKW10rZC
zG8Alq8rBeAWlO&oihbjCvXz>m=R1AJ%@ixogk`?|pFhSFFR-WC41k*jn>kF9HiAe3
zrNIFsS|mZo!O!jAe|6nn46ifB-XJzBV@+lTxN|SRwqe(wpYLFE9%8eG{h;cKJ~pr7
z)%dYSb%+Q3?6y+H4a0ulE%V?Qc@zYi)z5A%bLxPSy3wy&=L~xlZeh)<axv<c6D@wZ
zk-(W>l`W@v5R%(TLgV!UV}(<K&2Z~=!46I8d;`+k2eglOlPhXc13d8DiuV*8V~~e}
z46&tsWCv;^(^cH+P}wb#8_=35?%Y+c%gNqG60#kTcA;Q<AfQ(xoLY(O>D2@eYHr0D
z;WZw(!VjFP7nYnu(a#=ED+cX?Ez34)&U5r=ZgV`MIUZ=jan!AqE2K&1RLFw?a>k0s
z%Z9~?z%P+=g74jvBWM{G(Yi3BPx7!)5w<kDv^4wwFKG@dSp{30D~s;dlFTJZvI0D-
z1=!F;03-WBw?qys*y2=+qz)ph?0G#V$pWkcxLdG=Bg%ICm|y0n-Aco@O2;LMFIY1%
z`Xblpt&PyqA~8}edXn=aE@=+zH6zhRd~Fi!mQui7!H*A}<E4aA-cO<8=Vp6$=TZoQ
zEmyQo`o2)~`m_hz!@A@!@|-5R?hOJzFg9Ii|J2i4TJmdU51WfyIY{yBcugYNOk{Xj
z2u{&F7o=sg(JyP6?rI`aSKaHY)+?kf{blUE!zS~t(TMcu-Ga?hTrH$R$sjGl*X^_&
z&>E8whIcoDfOY^Kcw|K6VKkV1O8+Q~-FvQlK8_6mAFhz)qM*RbM`ft&DybE^jRwr}
zY8U<U#?vUMlOYA$noFmLSNI6UsM<)9kedJ6$-0eF4hS|^?iNEXHqKdFcRQWVb`|f4
zd&eH)zC7MeqA4hbg59h>Vsg;aLjc_-W_Elk)kvWjCOg-tdBUkzT!FpEDf!i^Uke><
zl+H<|Ao7+|^pk@3;#7<Fs#}zn6z@pqh|c>pr|mJPbB(%3vDx8r9XfoRb`5z9QltAw
z-|AdMr-pQsW;eTzAj-=&rzi}aY=cwGLoPBLe*B<&)b(mbTJ>I8nlMHZY<2u2J;G@E
zm@Uos+L*WCHSD&|Af3SchUgvF4K(j`lb-inxvN23o7c;d7r+3(AZ=&{4|^{5-mGQL
zW=5?{j2h&$Xeqd5M~=vmf<4xjrpeUua9JDam6nDy(B^p_6eDN4NG%$V?BG@?SgbQG
zw3;#_wLX^UgMmMM+V}M0Eq2<vc|yzj;PuK1I%fpCO>^|*43fN5Oc!jREnbnAn|Vea
zXc~Aq_BybC7$D(g59-<7e_b5&Y2Pbp1C%9#V7HdALb_^FtT-fMnXgYF<L3d}4rdI)
zllYQ969}hUA$%+m1e50+6|+*2q|C!o;9)5{aC_yr`06nog5BAyOS{w^2?NK-#Xa_P
z`m``zvEoet)o~5C5IW>JqaGbUgVHEn_9~9K`gHph>^$=HnQhdv%vQ0{Y(CKRM@CQQ
z@kJ|Tf%3&zR9ny&Q|S14!A9t5g%Cxueb+cu9MT}upc|g2vzz@>Pj97GwVvfk+#W*j
zBCkvo6DNG7Y{=;Y)H8E<$;@F4U*m#JLONl`7vxC6tnH~SJ7PApPvbv5nOSb&H)@F;
zNu5Z+p$)P2+D2(P<8NkWyeO+ho1$F9@=T{>!T5w9+^se7#cMS409{APfw@~gY&kj%
zuY$H8&=v5ahnu_8Hg2TTurXBi5_{bhE#~QK6w`LUVh<m7=@!*9QFE(a$(9w=<()sF
zn-3*ZfUoBxd_y7#CU1o8#HMI-1#de#t(GfB@4U%QsT1%?h*p)H0i;V@iZ9FBABx)}
zH^9;LJvuyYmWM}qybA>xuIe20gI>2Zdb}PM&1doWFzwE?;hB~&vWiQ`<GKJ(`&<d~
zmx=s_40)o%>11BwC%igGTBEqVxK*&FnRYY9SM!L!(<bq4#jP0r9e`Xymt_R`_T)(K
zNu+N9>6IHmY0B8mdX&_(DYijZ5V#Y_cNNXo03{^ow54(%x0+^c-UW0EfH$1vRod<8
z@P*l@4Bhc>VzM!2qWvgi(Bff=3sTR5&DL~t$Q2g1Y1-XWV%oOs-wx7@zb4gSDK=E<
zwpwTpw0^0@1YNwDr;w{ecx^_%T|=a3w<Mx<L>Gm0lQ!a<l3$;ogQVOrQ^qU&OS<+i
z!1o<m;A4SXr$b$L^AYS-5@&rzoH#PXVFN^8p)@YPNckDMJq+**4P?6AO3pOdPg9HR
zS9wT(Pl!7wqMU=;F-UT*%gC8=OAM9a;q4qE<cw(jkwMCfA+*ZS{|3Mh0Ge14T}sjT
zk|~bKtO2B70;G`00BDt2B^ix!6?M(p1kGRPup>R9^)~?5rzhGGK%_;ioie0pv#@FR
zWv$&87pe5g34WS5T5U#)JTj}JRR%%bjL;mPsVAb-7Fe`A#-}eXp!H>&g1Voe`DuW!
z06b$OTtZ9gT>n)Yp`{Gzs{{x>Z&R4`>OiNyo32pQRdqCZs5A!(P?Eth6K0{DdyM2?
z!`BORol+Osu1dvb|9yk^S=TZY@d-ftN(J_nX>De&bn3bb^(gPd*Ne8I_M(N#in8vR
zN|8^N;c0dYrp!~bE_3Zkgr8knfZl7o>1Md-a@WfIj(p}HXy#V3&E!QYZlhKjr3Aiw
zaiFSc>aI`8?BkT_qC2g=T&$U-H=pqjC1V1G4uBc>nNW*L=uU!gABG?zY6{sKaUwyi
zuI@Ja(lJkrT1nUec}X^vB*ZS|9PuEqOh_4}$UAe4m(-umMf7W>QiUbelCP&zU@2#L
z3&fb8kzk8N$j@x0C5Vbvu@KARQdQKLm4g&PyOm%UFv*d?rJ}dv*1fpACMfk6I)eOx
zu92$FWW4CeDXKc1&_yR?I%L7l6vvA?K}wr}>EvOQQWC7#V!V`=?nkmv6oyGM(K^Qj
zN;sevZU<N_*gWJm!m!xcX`BQ|XK9u)t3SoF)LdtV!mryxJwW_qPQNw3fd<{>jf#x^
z1Y6alC$eK<MZ~d#N~8ZJj`_9GV^j>gsH;FxVN}&K?`+nkl|NhU=biAx^o8cARQqZu
zU=8{Y<RNVa5|c#^S@_OFqIxKhdI1gsWRPIMB27;gJGDZ+=ygch3+t{Zjarq?9^FJ`
zG`cw=OHXkvYSdGk6OD^>2qw$roHmdUg^d84?9R0$!ES4zWF_eKNvLtP4%Abhh$+<{
zn|B&}CfJ=JcE=`VN3JqH5pn1$yLCzl6{Fv@UgO%6c~5Xh-k6AgT<?i$?Tb(&rv*4Z
zvCS#Up}VApR?s?&yYy2YDDZbAw0z{&+U@bCj<z5;{v-0UxSdiN@lS2189}3FTj9Bs
z6($K+84fV%PFhzwu}UeEqm&?{*K0ME|HcC=o7ae(>>fFcK)gX<st-)oi4wm|C2Kv9
z4iS~&z^Y}VqEe;obV&y_JFrrRU@LOljkU~n1!*RT;TJ4#nVjLkL@0Q*3-6j#p<ae=
z<+2g?jjfTiiDpt=%pCY3%ps{7toj00ec_=<sn~htI;UgVeOd)=2z^NIOiD0mF}5V#
z6ltZ9s5>2j)#M%vu7!j20uU)t5+`7*<1CZjsVGQ<#olUN$ZYFV?=O3I|68yBh3-e=
zbt*{Bu95-ig<}IW=hH;qFt0HRW-n)p(2Ko@Ew(4U11<8Bw-jH?0G8VbMpCu{eJcSH
zkEzsQ63ur3Anvj?Hic)=B3Z1%mpmRPD5Rfb0c*WQq2rRFfZ)eA0o-FDWS&m}A@L?k
zrnjUFF@*%exf~Xb%|bno0#+x$R)B3b0?(n4c!hM?AV`(%#?J(T%;8BPV+6Z)mwBQD
z3i~1%RA@xg{qXWQW}<pBHQODn68*jh3=RXx9KexC1}vlfXqL0+$JbGS#LI%%A5Ng}
z;S55Y{7{chfN;uY@iJN@ix}Y%8{upY!lO2VIz$8Oaey-bPuK|NF2LeP1z)leVuu;R
z;Os2q*+L2_vm9B3doeDBFl@6}pM#Ki*dWE06k;J02&WB&CI}xJ1Xc3K&#Em$%N)-~
zITR8Xniq2r%nkvE>1l-!`@?59O#?;A$SKX;B(ZSCXtGH$`NLKS=E|yTzQ9iyt7<63
znah_Vhe4#7vT7rHM~1QQf}yMwyo#^%VZW{X{?y6T7Nxe3+7Z01ngbO~p_sRfp5D&U
zQ(LL~8(dML5+@}68Nkm0-pmvHszmxM7rNT=g2J?(Zm|1Kn`OEnNax{}^=$0idAnv}
zTb(WlGWi!*@~AA2IPp=>C`uIsu}ORaFkPyG7E;Q(*7EAKHc5xl^{%g2-PZZs)OOf^
zp!cf)#=Aj5-utCRKc&6`%OI%Y8TvW^W@HeizQ_eWv!fF}gfw@AScbw}8^KI7Mo3Q6
z+`bD<DoiGA)eJ$Epdi`;0I4#gNs^I@M`%aBtFRbgNhBaT?ZON?m)V_X<;XkCNK?ze
zNR?Y%h0Z$xOs6VzplLP08i2I~G8dK`UY&p>O$rAsstOp1jj8Z?fK&|tO%8xGg~>XY
zEL35u)FYCHg>8vMJX(-;EbIg@X;G;6IXTAUwF@Tuh0g0qdV|yb0J4OW@RSM3Gbbku
do^2$ILA4hEC8BsbSScoVY9So1OMXYj{|6jyeq{gv

literal 0
HcmV?d00001

diff --git a/web/src/main/java/org/springframework/security/web/authentication/preauth/PreAuthenticatedCredentialsNotFoundException.java b/web/src/main/java/org/springframework/security/web/authentication/preauth/PreAuthenticatedCredentialsNotFoundException.java
index d18e7c0cc2b..57767d815c5 100644
--- a/web/src/main/java/org/springframework/security/web/authentication/preauth/PreAuthenticatedCredentialsNotFoundException.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/preauth/PreAuthenticatedCredentialsNotFoundException.java
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2016 the original author or authors.
+ * Copyright 2002-2024 the original author or authors.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -16,10 +16,15 @@
 
 package org.springframework.security.web.authentication.preauth;
 
+import java.io.Serial;
+
 import org.springframework.security.core.AuthenticationException;
 
 public class PreAuthenticatedCredentialsNotFoundException extends AuthenticationException {
 
+	@Serial
+	private static final long serialVersionUID = 2026209817833032728L;
+
 	public PreAuthenticatedCredentialsNotFoundException(String msg) {
 		super(msg);
 	}
diff --git a/web/src/main/java/org/springframework/security/web/authentication/rememberme/CookieTheftException.java b/web/src/main/java/org/springframework/security/web/authentication/rememberme/CookieTheftException.java
index dabaedd8954..3a477e0c504 100644
--- a/web/src/main/java/org/springframework/security/web/authentication/rememberme/CookieTheftException.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/rememberme/CookieTheftException.java
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2016 the original author or authors.
+ * Copyright 2002-2024 the original author or authors.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -16,11 +16,16 @@
 
 package org.springframework.security.web.authentication.rememberme;
 
+import java.io.Serial;
+
 /**
  * @author Luke Taylor
  */
 public class CookieTheftException extends RememberMeAuthenticationException {
 
+	@Serial
+	private static final long serialVersionUID = -7215039140728554850L;
+
 	public CookieTheftException(String message) {
 		super(message);
 	}
diff --git a/web/src/main/java/org/springframework/security/web/authentication/rememberme/InvalidCookieException.java b/web/src/main/java/org/springframework/security/web/authentication/rememberme/InvalidCookieException.java
index 00668e06d88..d434bbc47b4 100644
--- a/web/src/main/java/org/springframework/security/web/authentication/rememberme/InvalidCookieException.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/rememberme/InvalidCookieException.java
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2016 the original author or authors.
+ * Copyright 2002-2024 the original author or authors.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -16,6 +16,8 @@
 
 package org.springframework.security.web.authentication.rememberme;
 
+import java.io.Serial;
+
 /**
  * Exception thrown by a RememberMeServices implementation to indicate that a submitted
  * cookie is of an invalid format or has expired.
@@ -24,6 +26,9 @@
  */
 public class InvalidCookieException extends RememberMeAuthenticationException {
 
+	@Serial
+	private static final long serialVersionUID = -7952247791921087125L;
+
 	public InvalidCookieException(String message) {
 		super(message);
 	}
diff --git a/web/src/main/java/org/springframework/security/web/authentication/rememberme/RememberMeAuthenticationException.java b/web/src/main/java/org/springframework/security/web/authentication/rememberme/RememberMeAuthenticationException.java
index dc727efa921..a1fc8c4ee89 100644
--- a/web/src/main/java/org/springframework/security/web/authentication/rememberme/RememberMeAuthenticationException.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/rememberme/RememberMeAuthenticationException.java
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2016 the original author or authors.
+ * Copyright 2002-2024 the original author or authors.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -16,6 +16,8 @@
 
 package org.springframework.security.web.authentication.rememberme;
 
+import java.io.Serial;
+
 import org.springframework.security.core.AuthenticationException;
 
 /**
@@ -27,6 +29,9 @@
  */
 public class RememberMeAuthenticationException extends AuthenticationException {
 
+	@Serial
+	private static final long serialVersionUID = 7028526952590057426L;
+
 	/**
 	 * Constructs a {@code RememberMeAuthenticationException} with the specified message
 	 * and root cause.
diff --git a/web/src/main/java/org/springframework/security/web/authentication/session/SessionAuthenticationException.java b/web/src/main/java/org/springframework/security/web/authentication/session/SessionAuthenticationException.java
index db1650b3a9e..6ec0835f758 100644
--- a/web/src/main/java/org/springframework/security/web/authentication/session/SessionAuthenticationException.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/session/SessionAuthenticationException.java
@@ -1,5 +1,5 @@
 /*
- * Copyright 2002-2023 the original author or authors.
+ * Copyright 2002-2024 the original author or authors.
  *
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
@@ -16,6 +16,8 @@
 
 package org.springframework.security.web.authentication.session;
 
+import java.io.Serial;
+
 import org.springframework.security.core.AuthenticationException;
 
 /**
@@ -31,6 +33,9 @@
  */
 public class SessionAuthenticationException extends AuthenticationException {
 
+	@Serial
+	private static final long serialVersionUID = -2359914603911936474L;
+
 	public SessionAuthenticationException(String msg) {
 		super(msg);
 	}
diff --git a/web/src/main/java/org/springframework/security/web/authentication/www/NonceExpiredException.java b/web/src/main/java/org/springframework/security/web/authentication/www/NonceExpiredException.java
index 8ac38137d03..6628a9e27a2 100644
--- a/web/src/main/java/org/springframework/security/web/authentication/www/NonceExpiredException.java
+++ b/web/src/main/java/org/springframework/security/web/authentication/www/NonceExpiredException.java
@@ -16,6 +16,8 @@
 
 package org.springframework.security.web.authentication.www;
 
+import java.io.Serial;
+
 import org.springframework.security.core.AuthenticationException;
 
 /**
@@ -25,6 +27,9 @@
  */
 public class NonceExpiredException extends AuthenticationException {
 
+	@Serial
+	private static final long serialVersionUID = -3487244679050681257L;
+
 	/**
 	 * Constructs a <code>NonceExpiredException</code> with the specified message.
 	 * @param msg the detail message