Do not serialize CaseSensitiveClaimsIdentity.SecurityToken. (#2896)

* Do not serialize CaseSensitiveClaimsIdentity.SecurityToken. * Don't serialize. --------- Co-authored-by: jennyf19 <jeferrie@microsoft.com>
AzureAD · Oct 22, 2024 · f8849c5 · f8849c5
1 parent a76f215
commit f8849c5
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/src/Microsoft.IdentityModel.Tokens/CaseSensitiveClaimsIdentity.cs b/src/Microsoft.IdentityModel.Tokens/CaseSensitiveClaimsIdentity.cs
@@ -18,6 +18,7 @@ public class CaseSensitiveClaimsIdentity : ClaimsIdentity
         /// <summary>
         /// Gets the <see cref="SecurityToken"/> associated with this claims identity.
         /// </summary>
+        [field: NonSerialized]
         public SecurityToken SecurityToken { get; internal set; }
 
         /// <summary>

diff --git a/src/Microsoft.IdentityModel.Tokens/SecurityToken.cs b/src/Microsoft.IdentityModel.Tokens/SecurityToken.cs
@@ -11,7 +11,6 @@ namespace Microsoft.IdentityModel.Tokens
     /// <summary>
     /// Base class for security token.
     /// </summary>
-    [Serializable]
     public abstract class SecurityToken : ISafeLogSecurityArtifact
     {
         internal virtual IEnumerable<Claim> CreateClaims(string issuer)