UsernamePrincipal implements Serializable ?

[Tom Zeller]

> I didn't notice (or change that) but I think it reflects that fact that we don't intend to use Java serialization to handle this area.
>
> My plan is to (for now) require workflows to attach a StorageSerializer to themselves that can marshall and/all data the workflow produces, including any custom Subject/Principal data.

Hmm. My question is based on the Javadoc for Subject which says :

"Note that the java.security.Principal class does not implement
Serializable. Therefore all concrete Principal implementations
associated with Subjects must implement Serializable."