[jira] [Resolved] (CXF-8907) java.lang.NullPointerException at AsymmetricBindingHandler.java
[ https://issues.apache.org/jira/browse/CXF-8907?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andriy Redko resolved CXF-8907. --- Resolution: Fixed > java.lang.NullPointerException at AsymmetricBindingHandler.java > > > Key: CXF-8907 > URL: https://issues.apache.org/jira/browse/CXF-8907 > Project: CXF > Issue Type: Bug > Components: JAX-RS Security >Affects Versions: 3.3.9, 3.4.10, 3.5.6, 3.6.1, 4.0.2 >Reporter: Rich M >Assignee: Andriy Redko >Priority: Critical > Fix For: 3.4.11, 3.5.7, 3.6.2, 4.0.3 > > Attachments: image-2023-07-27-21-41-35-390.png > > > I am facing an issue with CXF PolicyBasedWSS4JOutInterceptor. The class > AsymmetricBindingHandler.java has a method getSAMLToken(). Previous version > of this class (cxf-rt-ws-security-2.7.14.jar) had a null check for > RECV_RESULTS, but the newer versions (using > cxf-rt-ws-security-3.3.12.redhat-1.jar) removed the null check, which now > leads to NullPointerException. > Stacktrace: > Caused by: java.lang.NullPointerException > at > org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.getSAMLToken(AsymmetricBindingHandler.java:818) > [cxf-rt-ws-security.jar:3.3.12.redhat-1] > at > org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt(AsymmetricBindingHandler.java:159) > [cxf-rt-ws-security.jar:3.3.12.redhat-1] > !image-2023-07-27-21-41-35-390.png! > -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Resolved] (CXF-8878) Get rid of EasyMock in cxf-rt-transports-http-netty-server
[ https://issues.apache.org/jira/browse/CXF-8878?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andriy Redko resolved CXF-8878. --- Resolution: Fixed > Get rid of EasyMock in cxf-rt-transports-http-netty-server > -- > > Key: CXF-8878 > URL: https://issues.apache.org/jira/browse/CXF-8878 > Project: CXF > Issue Type: Sub-task >Reporter: Andriy Redko >Assignee: Andriy Redko >Priority: Major > Fix For: 3.6.2, 4.0.3 > > -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Updated] (CXF-8549) Get rid of EasyMock
[ https://issues.apache.org/jira/browse/CXF-8549?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andriy Redko updated CXF-8549: -- Description: Get rid of EasyMock in favor of Mockito since it does require additional access to sealed JDK internals for JDK-16 and above. Also, the EasyMock does not support JDK-21 as of today. {noformat} Caused by: java.lang.IllegalArgumentException: org.apache.cxf.io.CachedOutputStream$$$EasyMock$1 must be defined in the same package as org.easymock.internal.ClassProxyFactory at org.easymock.bytebuddy.dynamic.loading.ClassInjector$UsingLookup.injectRaw(ClassInjector.java:1635) at org.easymock.bytebuddy.dynamic.loading.ClassInjector$AbstractBase.inject(ClassInjector.java:118) at org.easymock.bytebuddy.dynamic.loading.ClassLoadingStrategy$UsingLookup.load(ClassLoadingStrategy.java:519) at org.easymock.bytebuddy.dynamic.TypeResolutionStrategy$Passive.initialize(TypeResolutionStrategy.java:101) at org.easymock.bytebuddy.dynamic.DynamicType$Default$Unloaded.load(DynamicType.java:6317) at org.easymock.internal.ClassProxyFactory.lambda$createProxy$0(ClassProxyFactory.java:146) at org.easymock.bytebuddy.TypeCache.findOrInsert(TypeCache.java:168) ... 34 more {noformat} [X] ./core/pom.xml [ ] ./integration/jca/pom.xml [X] ./rt/bindings/coloc/pom.xml [X] ./rt/bindings/corba/pom.xml [X] ./rt/bindings/soap/pom.xml [X] ./rt/databinding/aegis/pom.xml [ ] ./rt/databinding/jaxb/pom.xml [ ] ./rt/features/clustering/pom.xml [ ] ./rt/features/logging/pom.xml [ ] ./rt/features/throttling/pom.xml [X] ./rt/frontend/jaxrs/pom.xml [X] ./rt/frontend/jaxws/pom.xml [ ] ./rt/frontend/js/pom.xml [X] ./rt/management/pom.xml [ ] ./rt/rs/client/pom.xml [X] ./rt/rs/description/pom.xml [ ] ./rt/rs/extensions/providers/pom.xml [ ] ./rt/rs/extensions/search/pom.xml [ ] ./rt/rs/microprofile-client/pom.xml [ ] ./rt/rs/security/oauth-parent/oauth2/pom.xml [ ] ./rt/rs/security/oauth-parent/oauth2-saml/pom.xml [ ] ./rt/rs/security/sso/oidc/pom.xml [X] ./rt/transports/http/pom.xml [X] ./rt/transports/http-jetty/pom.xml [ ] ./rt/transports/http-netty/netty-client/pom.xml [X] ./rt/transports/http-netty/netty-server/pom.xml [X] ./rt/transports/http-undertow/pom.xml [ ] ./rt/transports/jms/pom.xml [X] ./rt/transports/websocket/pom.xml [ ] ./rt/ws/addr/pom.xml [X] ./rt/ws/policy/pom.xml [ ] ./rt/ws/rm/pom.xml [ ] ./rt/ws/security/pom.xml [ ] ./rt/ws/transfer/pom.xml [X] ./rt/wsdl/pom.xml [ ] ./services/xkms/xkms-x509-handlers/pom.xml [ ] ./services/xkms/xkms-x509-repo-ldap/pom.xml was: Get rid of EasyMock in favor of Mockito since it does require additional access to sealed JDK internals for JDK-16 and above. Also, the EasyMock does not support JDK-21 as of today. {noformat} Caused by: java.lang.IllegalArgumentException: org.apache.cxf.io.CachedOutputStream$$$EasyMock$1 must be defined in the same package as org.easymock.internal.ClassProxyFactory at org.easymock.bytebuddy.dynamic.loading.ClassInjector$UsingLookup.injectRaw(ClassInjector.java:1635) at org.easymock.bytebuddy.dynamic.loading.ClassInjector$AbstractBase.inject(ClassInjector.java:118) at org.easymock.bytebuddy.dynamic.loading.ClassLoadingStrategy$UsingLookup.load(ClassLoadingStrategy.java:519) at org.easymock.bytebuddy.dynamic.TypeResolutionStrategy$Passive.initialize(TypeResolutionStrategy.java:101) at org.easymock.bytebuddy.dynamic.DynamicType$Default$Unloaded.load(DynamicType.java:6317) at org.easymock.internal.ClassProxyFactory.lambda$createProxy$0(ClassProxyFactory.java:146) at org.easymock.bytebuddy.TypeCache.findOrInsert(TypeCache.java:168) ... 34 more {noformat} [X] ./core/pom.xml [ ] ./integration/jca/pom.xml [ ] ./rt/bindings/coloc/pom.xml [X] ./rt/bindings/corba/pom.xml [X] ./rt/bindings/soap/pom.xml [X] ./rt/databinding/aegis/pom.xml [ ] ./rt/databinding/jaxb/pom.xml [ ] ./rt/features/clustering/pom.xml [ ] ./rt/features/logging/pom.xml [ ] ./rt/features/throttling/pom.xml [X] ./rt/frontend/jaxrs/pom.xml [X] ./rt/frontend/jaxws/pom.xml [ ] ./rt/frontend/js/pom.xml [X] ./rt/management/pom.xml [ ] ./rt/rs/client/pom.xml [X] ./rt/rs/description/pom.xml [ ] ./rt/rs/extensions/providers/pom.xml [ ] ./rt/rs/extensions/search/pom.xml [ ] ./rt/rs/microprofile-client/pom.xml [ ] ./rt/rs/security/oauth-parent/oauth2/pom.xml [ ] ./rt/rs/security/oauth-parent/oauth2-saml/pom.xml [ ] ./rt/rs/security/sso/oidc/pom.xml [X] ./rt/transports/http/pom.xml [X] ./rt/transports/http-jetty/pom.xml [ ] ./rt/transports/http-netty/netty-client/pom.xml [ ] ./rt/transports/http-netty/netty-server/pom.xml [X] ./rt/transports/http-undertow/pom.xml [ ] ./rt/transports/jms/pom.xml [X] ./rt/transports/websocket/pom.xml [ ] ./rt/ws/addr/pom.xml [X] ./rt/ws/policy/pom.xml [ ] ./rt/ws/rm/pom.xml [ ] ./rt/ws/security/pom.xml [ ] ./rt/ws/transfer/pom.xml [X] ./rt/