How to properly configure spring.json.trusted.packages for Kafka Streams?

[oleksii-suprun]

Does anyone know how to configure spring.json.trusted.packages for Kafka Streams? I'm using the following config:

@Configuration
@EnableKafka
@EnableKafkaStreams
public class KafkaStreamsConfig {

    @Bean(name = KafkaStreamsDefaultConfiguration.DEFAULT_STREAMS_CONFIG_BEAN_NAME)
    public KafkaStreamsConfiguration kStreamsConfig(KafkaProperties kafkaProperties) {
        return new KafkaStreamsConfiguration(Map.of(
                StreamsConfig.APPLICATION_ID_CONFIG, kafkaProperties.getStreams().getApplicationId(),
                StreamsConfig.BOOTSTRAP_SERVERS_CONFIG, kafkaProperties.getStreams().getBootstrapServers(),
                StreamsConfig.DEFAULT_KEY_SERDE_CLASS_CONFIG, Serdes.String().getClass().getName(),
                StreamsConfig.DEFAULT_VALUE_SERDE_CLASS_CONFIG, Serdes.String().getClass().getName(),
                StreamsConfig.DEFAULT_TIMESTAMP_EXTRACTOR_CLASS_CONFIG, WallclockTimestampExtractor.class.getName()
        ));
    }

My application.yml is the following:

spring:
  kafka:
    streams:
      bootstrap-servers: XXX.XXX.XXX.XXX:9092
      application-id: spring-kafka-test
      properties:
        processing.guarantee: exactly_once
        spring.json.trusted.packages: com.mypackage.streams.entity.kafka.*

But when I change the package of the entity published into Kafka, I'm receiving the following exception:

Caused by: java.lang.IllegalArgumentException: The class 'com.mypackage.streams.entity.kafka.raw.Entity' is not in the trusted packages: [java.util, java.lang, com.mypackage.streams.entity.kafka, com.mypackage.streams.entity.kafka.*]. If you believe this class is safe to deserialize, please provide its name. If the serialization is only done by a trusted source, you can also enable trust all (*).
	at org.springframework.kafka.support.mapping.DefaultJackson2JavaTypeMapper.getClassIdType(DefaultJackson2JavaTypeMapper.java:129)
	at org.springframework.kafka.support.mapping.DefaultJackson2JavaTypeMapper.toJavaType(DefaultJackson2JavaTypeMapper.java:103)
	at org.springframework.kafka.support.serializer.JsonDeserializer.deserialize(JsonDeserializer.java:569)
	at org.apache.kafka.streams.processor.internals.SourceNode.deserializeValue(SourceNode.java:58)
	at org.apache.kafka.streams.processor.internals.RecordDeserializer.deserialize(RecordDeserializer.java:66)
	... 9 more

Looks like the property added to the appplication.yml does not work.

[garyrussell]

Don't ask the same question in multiple places; it wastes our time and yours. As I answered on Gitter

Your default Serdes are the StringSerde - perhaps you are using the JSON Serde directly in your topology; in that cases you either need to call its configure() method, or configure it programmatically.

[oleksii-suprun]

Won't do it next time. Thanks for the answer.

[DanielHGimenez]

Could you let the response link here?

[oleksii-suprun]

@DanielHGimenez, sure, please take a look: https://stackoverflow.com/a/71645529/2494102

[vskrahul]

but where is answer?