Consider not including fields in default Workflow serialization

[frankbuckley]

When using Workflow, the default JSON serializer is configured to include fields by default.

public class JsonDataConverter : DataConverter
{
    // WARNING: Changing default serialization options could potentially be breaking for in-flight orchestrations.
    static readonly JsonSerializerOptions DefaultOptions = new()
    {
        IncludeFields = true,
    };

This is unusual as it is not the default in .NET and might lead to unexpected data leaks/disclosure.

Changing the default is a breaking change for existing workflows, but it seems unlikely that users are relying on this unusual behaviour. If anyone is then the configuration can be overridden.

[WhitWaldo]

In the upcoming release of Dapr.Workflow, I have exposed a mechanism to allow you to change any of the JsonSerializationOptions defaults (it defaults to the "Web" styles), so you're welcome to make this change in your own application.

This is available today in the 1.17 RC and I've started writing the corresponding documentation for it (won't be published until the 1.17 release).