On Tue, 19 Nov 2024 09:54:43 GMT, Jaikiran Pai <j...@openjdk.org> wrote:

> Can I please get a review of this code which cleans up usages of 
> SecurityManager and related APIs? This addresses 
> https://bugs.openjdk.org/browse/JDK-8344190.
> 
> No new tests have been added and testing of tier1, tier2, tier3 is in 
> progress.

Pfew! That's a lot of complex code going away! Good work!

A few minor comments. Well, actually, just one. Please make sure to run all 
tier1,tier2,tier3 tests.

src/java.base/share/classes/sun/net/www/protocol/http/BasicAuthentication.java 
line 56:

> 54:     @java.io.Serial
> 55:     private static final long serialVersionUID = 100L;
> 56: 

Good cleanup. I see `Serializable` was removed from `AuthCacheValue` when 
fixing JDK-8304818, it was an oversight to not remove `serialVersionUID` from 
subclasses at that time. I see you're removing it from `DigestAuthentication`, 
`NTLMAuthentication` and `NegotiateAuthentication` too. This is good. You seem 
to be missing the window's version of `NTLMAuthentication` though.

src/java.base/share/classes/sun/net/www/protocol/http/NegotiateAuthentication.java
 line 71:

> 69:         cacheSPNEGO = Boolean.parseBoolean(spnegoCacheProp);
> 70:     }
> 71: 

Removing that static initializer was missed when fixing JDK-8318599.

src/java.base/unix/classes/sun/net/www/protocol/http/ntlm/NTLMAuthentication.java
 line 74:

> 72: 
> 73: public class NTLMAuthentication extends AuthenticationInfo {
> 74:     private static final long serialVersionUID = 170L;

There is also a windows implementation of this class

-------------

PR Review: https://git.openjdk.org/jdk/pull/22232#pullrequestreview-2445683773
PR Review Comment: https://git.openjdk.org/jdk/pull/22232#discussion_r1848489990
PR Review Comment: https://git.openjdk.org/jdk/pull/22232#discussion_r1848523670
PR Review Comment: https://git.openjdk.org/jdk/pull/22232#discussion_r1848667999

Reply via email to