Search code examples
anypoint-studiomulesoft

Trying to deserialize a session but no signature validation key specified

I am facing the following issue: org.mule.session.SerializeAndEncodeSessionHandler - Trying to deserialize a session but no signature validation key specified what results in session variable not being deserialized, thus I can't access them

The issue exists when I run the project on mule kernel 3.9.0. It works fine on 3.9.0 runtime in AnyPointStudio.

1

Solution

  • You need to specify a secret key in Java property mule.session.sign.secretKey to sign the session variables that are created by the collection splitter. This is a consequence of security patch: https://help.mulesoft.com/s/article/Runtime-Security-Patch-31-October-2019

    For example: -Dmule.session.sign.secretKey=REPLACE_BY_SECRET_VALUE

    See section 'Patch Configuration' of above article for details.