Is HttpSessionOAuth2AuthorizationRequestRepository thread-safe?

Question

On following issue, state-OAuth2AuthorizationRequest pairs are saved in HttpSession, using HashMap:

• HttpSessionO