[jira] [Commented] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848291#comment-15848291
]
ASF GitHub Bot commented on CXF-7198:
-
GitHub user deki opened a pull request:
https://github.com/apache/cxf/pull/233
CXF-7198: Update Spring-Boot to 1.5.1 release
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/deki/cxf CXF-7198
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/cxf/pull/233.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #233
commit 8fac5fa3eecc58e586f2dde138e7bce99ea6ed9a
Author: Dennis Kieselhorst
Date: 2017-02-01T11:39:58Z
CXF-7198: Update Spring-Boot to 1.5.1 release
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Commented] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848294#comment-15848294
]
ASF GitHub Bot commented on CXF-7198:
-
Github user deki commented on the issue:
https://github.com/apache/cxf/pull/232
The problem is described in CXF-7198. I think CXF should use the latest
Spring Boot version, samples should also be based on that. I've opened another
PR #233 for it.
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Commented] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848310#comment-15848310
]
ASF GitHub Bot commented on CXF-7198:
-
Github user sberyozkin commented on the issue:
https://github.com/apache/cxf/pull/233
See my comments to #232. The actual version upgrade does not change
anything in CXF but a change a new major SprongBoot dep. This is not a bad idea
in itself - but will we break 1.4.x SpringBoot users if we start inadvertently
utilizing 1.5.x features where 1.4.x is still not exactly old ?
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Issue Comment Deleted] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergey Beryozkin updated CXF-7198:
--
Comment: was deleted
(was: GitHub user deki opened a pull request:
https://github.com/apache/cxf/pull/233
CXF-7198: Update Spring-Boot to 1.5.1 release
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/deki/cxf CXF-7198
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/cxf/pull/233.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #233
commit 8fac5fa3eecc58e586f2dde138e7bce99ea6ed9a
Author: Dennis Kieselhorst
Date: 2017-02-01T11:39:58Z
CXF-7198: Update Spring-Boot to 1.5.1 release
)
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Issue Comment Deleted] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergey Beryozkin updated CXF-7198:
--
Comment: was deleted
(was: Github user deki commented on the issue:
https://github.com/apache/cxf/pull/232
The problem is described in CXF-7198. I think CXF should use the latest
Spring Boot version, samples should also be based on that. I've opened another
PR #233 for it.
)
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Issue Comment Deleted] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergey Beryozkin updated CXF-7198:
--
Comment: was deleted
(was: Github user sberyozkin commented on the issue:
https://github.com/apache/cxf/pull/233
See my comments to #232. The actual version upgrade does not change
anything in CXF but a change a new major SprongBoot dep. This is not a bad idea
in itself - but will we break 1.4.x SpringBoot users if we start inadvertently
utilizing 1.5.x features where 1.4.x is still not exactly old ?
)
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Commented] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848317#comment-15848317
]
ASF GitHub Bot commented on CXF-7198:
-
Github user sberyozkin commented on the issue:
https://github.com/apache/cxf/pull/233
In other words, given that it was confirmed CXF starters can now work with
1.5.x, I think that we should only upgrade to 1.5.x if we start using 1.5.x
features inside CXF starters - to make sure CXF Spring Boot 1.4.x and 1.5.x
users can use the startes
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Commented] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848325#comment-15848325
]
ASF GitHub Bot commented on CXF-7198:
-
Github user deki commented on the issue:
https://github.com/apache/cxf/pull/233
Ok.
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Commented] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848326#comment-15848326
]
ASF GitHub Bot commented on CXF-7198:
-
Github user deki closed the pull request at:
https://github.com/apache/cxf/pull/233
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Created] (CXF-7237) Upgrade to SpringBoot 1.5.x
Sergey Beryozkin created CXF-7237: - Summary: Upgrade to SpringBoot 1.5.x Key: CXF-7237 URL: https://issues.apache.org/jira/browse/CXF-7237 Project: CXF Issue Type: Improvement Components: Integration Reporter: Sergey Beryozkin Fix For: 3.2.0 Right now CXF SpringBoot starters depend on SpringBoot 1.4.x and they have also been updated to make sure they can be run with SpringBoot 1.5.x. The question is if we should upgrade CXF starters to depend on 1.5.x, i.e, do we still care if SpringBoot 1.4.x can run CXF starters ? Even if we upgrade to 1.5.x they can still probably run with 1.4.x given that as far as API which CXF depends upon has not changed, but it would be worth confirming. At the moment it appears that we should upgrade to 1.5.x if one of the following happens: - 1.5.x users report some other issues blocking them from using CXF starters currently depending on 1.4.x - CXF starters gets enhanced to use 1.5.x features - 1.4.x becomes a legacy SpringBoot branch -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (CXF-7237) Upgrade to SpringBoot 1.5.x
[ https://issues.apache.org/jira/browse/CXF-7237?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848336#comment-15848336 ] Sergey Beryozkin commented on CXF-7237: --- See https://github.com/apache/cxf/pull/232 https://github.com/apache/cxf/pull/233 > Upgrade to SpringBoot 1.5.x > --- > > Key: CXF-7237 > URL: https://issues.apache.org/jira/browse/CXF-7237 > Project: CXF > Issue Type: Improvement > Components: Integration >Reporter: Sergey Beryozkin > Fix For: 3.2.0 > > > Right now CXF SpringBoot starters depend on SpringBoot 1.4.x and they have > also been updated to make sure they can be run with SpringBoot 1.5.x. > The question is if we should upgrade CXF starters to depend on 1.5.x, i.e, do > we still care if SpringBoot 1.4.x can run CXF starters ? Even if we upgrade > to 1.5.x they can still probably run with 1.4.x given that as far as API > which CXF depends upon has not changed, but it would be worth confirming. > At the moment it appears that we should upgrade to 1.5.x if one of the > following happens: > - 1.5.x users report some other issues blocking them from using CXF starters > currently depending on 1.4.x > - CXF starters gets enhanced to use 1.5.x features > - 1.4.x becomes a legacy SpringBoot branch -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (CXF-7198) cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
[
https://issues.apache.org/jira/browse/CXF-7198?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848338#comment-15848338
]
ASF GitHub Bot commented on CXF-7198:
-
Github user sberyozkin commented on the issue:
https://github.com/apache/cxf/pull/233
I've opened https://issues.apache.org/jira/browse/CXF-7237 to get this
issue tracked and be more visible, thanks
> cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above
> -
>
> Key: CXF-7198
> URL: https://issues.apache.org/jira/browse/CXF-7198
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS, JAX-WS Runtime
>Reporter: Karthik Prasad
>Assignee: Freeman Fang
> Fix For: 3.2.0
>
>
> The ServletRegistrationBean( package
> org.springframework.boot.context.embedded.ServletRegistrationBean) which was
> already marked as deprecated since version 1.4 , as part of clean-up activity
> in version 1.5.0 has been removed and moved to
> org.springframework.boot.web.servlet.ServletRegistrationBean. Hence when
> using cxf-spring-boot-starter-jaxrs or cxf-spring-boot-starter-jaxws with
> spring-boot 1.5.0 or 2.0.0 snapshot. Application fails with error
> java.lang.ClassNotFoundException:
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> Below is the Javadoc provided in deprecated class
> org.springframework.boot.context.embedded.ServletRegistrationBean.
> /*
> * @deprecated as of 1.4 in favor of
> * {@link org.springframework.boot.web.servlet.ServletRegistrationBean}
> */
> @Deprecated
> public class ServletRegistrationBean
> extends
> org.springframework.boot.web.servlet.ServletRegistrationBean
> }
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
[jira] [Commented] (CXF-7237) Upgrade to SpringBoot 1.5.x
[ https://issues.apache.org/jira/browse/CXF-7237?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848344#comment-15848344 ] Sergey Beryozkin commented on CXF-7237: --- That said, given it is 3.2.0, may be we just should go with this upgrade > Upgrade to SpringBoot 1.5.x > --- > > Key: CXF-7237 > URL: https://issues.apache.org/jira/browse/CXF-7237 > Project: CXF > Issue Type: Improvement > Components: Integration >Reporter: Sergey Beryozkin > Fix For: 3.2.0 > > > Right now CXF SpringBoot starters depend on SpringBoot 1.4.x and they have > also been updated to make sure they can be run with SpringBoot 1.5.x. > The question is if we should upgrade CXF starters to depend on 1.5.x, i.e, do > we still care if SpringBoot 1.4.x can run CXF starters ? Even if we upgrade > to 1.5.x they can still probably run with 1.4.x given that as far as API > which CXF depends upon has not changed, but it would be worth confirming. > At the moment it appears that we should upgrade to 1.5.x if one of the > following happens: > - 1.5.x users report some other issues blocking them from using CXF starters > currently depending on 1.4.x > - CXF starters gets enhanced to use 1.5.x features > - 1.4.x becomes a legacy SpringBoot branch -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (CXF-6728) Review and improve the way EC keys are handled in JOSE code
[ https://issues.apache.org/jira/browse/CXF-6728?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848382#comment-15848382 ] Sergey Beryozkin commented on CXF-6728: --- Needs to be double-checked with 1.8.0_121 > Review and improve the way EC keys are handled in JOSE code > --- > > Key: CXF-6728 > URL: https://issues.apache.org/jira/browse/CXF-6728 > Project: CXF > Issue Type: Improvement > Components: JAX-RS Security >Reporter: Sergey Beryozkin >Priority: Minor > > The code which decodes/encodes JOSE EC key outputs needs to be reviewed. The > current code was meant to be a more optimal version of the code available in > Jose4J (which is actually a slightly improved version of the code found in > Santuario plus dealing with JOSE specific optimizations). This code needs to > be double-checked and if needed reverted to a version closer to the one found > in Jose4J. > Curves: it should be possible to deduce the values from the current EC key as > opposed to having users configure them explicitly. > Next, > https://tools.ietf.org/html/draft-ietf-jose-cfrg-curves-00 > has just come out, so I guess EC code will need to be updated accordingly. > I also recall that if EC keys are loaded from JKS then the default algorithm > needs be set correctly if EC signature/enc algo is not set, at the moment it > is always set to RS256 by default -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Updated] (CXF-6728) Review and improve the way EC keys are handled in JOSE code
[ https://issues.apache.org/jira/browse/CXF-6728?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sergey Beryozkin updated CXF-6728: -- Priority: Major (was: Minor) Fix Version/s: 3.1.11 3.2.0 > Review and improve the way EC keys are handled in JOSE code > --- > > Key: CXF-6728 > URL: https://issues.apache.org/jira/browse/CXF-6728 > Project: CXF > Issue Type: Improvement > Components: JAX-RS Security >Reporter: Sergey Beryozkin > Fix For: 3.2.0, 3.1.11 > > > The code which decodes/encodes JOSE EC key outputs needs to be reviewed. The > current code was meant to be a more optimal version of the code available in > Jose4J (which is actually a slightly improved version of the code found in > Santuario plus dealing with JOSE specific optimizations). This code needs to > be double-checked and if needed reverted to a version closer to the one found > in Jose4J. > Curves: it should be possible to deduce the values from the current EC key as > opposed to having users configure them explicitly. > Next, > https://tools.ietf.org/html/draft-ietf-jose-cfrg-curves-00 > has just come out, so I guess EC code will need to be updated accordingly. > I also recall that if EC keys are loaded from JKS then the default algorithm > needs be set correctly if EC signature/enc algo is not set, at the moment it > is always set to RS256 by default -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (CXF-6532) Consider implementing Json Clear Signature spec
[ https://issues.apache.org/jira/browse/CXF-6532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848589#comment-15848589 ] Anders Rundgren commented on CXF-6532: -- JCS depends on ES6 serialization of JSON data which is a standard feature in JavaScript (Browsers + Node.js) but not (yet) in Java. It may be a reasonable first step adding JCS support to an existing JSON parser supported by CXF such as "Jackson". > Consider implementing Json Clear Signature spec > --- > > Key: CXF-6532 > URL: https://issues.apache.org/jira/browse/CXF-6532 > Project: CXF > Issue Type: New Feature > Components: JAX-RS Security >Reporter: Sergey Beryozkin > Fix For: 3.2.0 > > > https://cyberphone.github.io/openkeystore/resources/docs/jcs.html -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (CXF-6532) Consider implementing Json Clear Signature spec
[ https://issues.apache.org/jira/browse/CXF-6532?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848595#comment-15848595 ] Sergey Beryozkin commented on CXF-6532: --- The question is, given a custom bean, like MyDocument (which may have some properties), how to intercept the JSON serialization process, so that the signature can be calculated on the flight and the payload be augmented with the @signature property. If MyDocument has JAXB annotations and depends on a JAXB XML to JSON conversions then perhaps we can register a JCS XMLStreamWriter (and XMLStreamReader on the read side) which is possible for ex with CXF JSONProvider (Jettison based). If Jackson allows to intercept the serialization process then perhaps it is possible to use Jackson. May be the simplest option to start, for POC, is to have CXF filters caching the stream, and then reading it, adding or validating the signature, and then letting the request flow. > Consider implementing Json Clear Signature spec > --- > > Key: CXF-6532 > URL: https://issues.apache.org/jira/browse/CXF-6532 > Project: CXF > Issue Type: New Feature > Components: JAX-RS Security >Reporter: Sergey Beryozkin > Fix For: 3.2.0 > > > https://cyberphone.github.io/openkeystore/resources/docs/jcs.html -- This message was sent by Atlassian JIRA (v6.3.15#6346)
[jira] [Commented] (CXF-7237) Upgrade to SpringBoot 1.5.x
[ https://issues.apache.org/jira/browse/CXF-7237?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15849545#comment-15849545 ] Alexander K. commented on CXF-7237: --- Right, and also now we have an opposite situation where we cannot upgrade to Spring Boot 1.5.x due to [cxf-spring-boot-starter does not work with Spring Boot 1.5.0 or above|https://issues.apache.org/jira/browse/CXF-7198] issue which was not fixed in the latest CXF 3.1.x release. And we need Spring Boot 1.5.x because it is the only version that supports Apache log4j 2.7 and above in which an enhancement was done for us. At some point it was a triple dependency chain and now two are already resolved. So it will be nice to have a quick CXF release with Spring Boot 1.5.x support, either in 3.1.x or 3.2.0. Thanks. > Upgrade to SpringBoot 1.5.x > --- > > Key: CXF-7237 > URL: https://issues.apache.org/jira/browse/CXF-7237 > Project: CXF > Issue Type: Improvement > Components: Integration >Reporter: Sergey Beryozkin > Fix For: 3.2.0 > > > Right now CXF SpringBoot starters depend on SpringBoot 1.4.x and they have > also been updated to make sure they can be run with SpringBoot 1.5.x. > The question is if we should upgrade CXF starters to depend on 1.5.x, i.e, do > we still care if SpringBoot 1.4.x can run CXF starters ? Even if we upgrade > to 1.5.x they can still probably run with 1.4.x given that as far as API > which CXF depends upon has not changed, but it would be worth confirming. > At the moment it appears that we should upgrade to 1.5.x if one of the > following happens: > - 1.5.x users report some other issues blocking them from using CXF starters > currently depending on 1.4.x > - CXF starters gets enhanced to use 1.5.x features > - 1.4.x becomes a legacy SpringBoot branch -- This message was sent by Atlassian JIRA (v6.3.15#6346)
