Proposal: Release Shiro 2.0-alpha-1 to maven central

2022-12-08 Thread lenny
This will enable people to at least try to use modern Jakarta and JPMS without enabling snapshots and adding Apache snapshot repo

RE: Re: [VOTE] Release Apache Shiro 1.11.0

2023-01-07 Thread lenny
Ugh. Unfortunately, I am going to have to change my vote to -1. This due to my own oversight and somehow letting this happen: https://github.com/apache/shiro/pull/558#issuecomment-1374416989 <https://github.com/apache/shiro/pull/558#issuecomment-1374416989> Lenny Primak: -1 (binding) O

Re: [VOTE] Release Apache Shiro 1.11.0

2023-01-07 Thread lenny
s due to my own oversight and somehow letting this happen: > https://github.com/apache/shiro/pull/558#issuecomment-1374416989 > <https://github.com/apache/shiro/pull/558#issuecomment-1374416989> > > Lenny Primak: -1 (binding) > > On 2023/01/04 00:56:41 Lenny Primak wrote:

Proposal: Update minimum Java version for Shiro 2.x to 11

2023-01-11 Thread lenny
Hi! Looks like we’ve had some feedback, and I’d like to proceed with this. MR-Jars seem controversial and not very well supported in WARs and OSGi. Lenny Primak: +1

Re: [VOTE] Set minimal JDK11 for Shiro 2.x

2023-01-20 Thread lenny
Lenny Primak: +1 > On Jan 20, 2023, at 4:25 AM, fpapon wrote: > > Hi, > > After several discussion on the mailing, I would like to start a vote to set > the minimal version of the JDK to the version 11 starting to Shiro 2.x. > > Vote open for 72 hours: > > [ ]

[VOTE] Release Apache Shiro 2.0.0-alpha-1

2023-02-26 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-1 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1046 https://repository.apache.org/content/repositories/o

RE: [VOTE] Release Apache Shiro 2.0.0-alpha-1

2023-02-26 Thread lenny
Lenny Primak: +1 On 2023/02/26 23:12:28 le...@flowlogix.com wrote: > This is a call to vote in favor of releasing Apache Shiro version > 2.0.0-alpha-1 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1046 > <https://reposito

RE: [VOTE] Release Apache Shiro 2.0.0-alpha-1

2023-02-27 Thread lenny
[Failed] OmniFaces released a new version that should be included in the alpha. I will release a new version shortly. On 2023/02/26 23:12:28 le...@flowlogix.com wrote: > This is a call to vote in favor of releasing Apache Shiro version > 2.0.0-alpha-1 > > Maven Staging repo: > https://repositor

[VOTE] Release Apache Shiro 2.0.0-alpha-1 (try #2)

2023-02-27 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-1 (try #2) Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1047 https://repository.apache.org/content/repositories/orgapacheshiro-1047/org/apache/shiro/shiro-root/2.0.0-alpha-1/shi

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-1 (try #2)

2023-02-27 Thread lenny
Lenny Primak: +1 > On Feb 28, 2023, at 2:13 AM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version > 2.0.0-alpha-1 (try #2) > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapa

[CANCEL][VOTE] Release Apache Shiro 2.0.0-alpha-1 (original)

2023-02-27 Thread lenny
Vote for the original alpha has been canceled. Vote for (try #2) is open. Sorry for the confusion

[SUCCESS][VOTE] Release Apache Shiro 2.0.0-alpha-1 (try #2)

2023-03-03 Thread lenny
Hi, The vote has passed with the following result: +1: François Papon, Jean-Baptiste Onofré, Lenny Primak PMC quorum: reached I will promote the source release zip file to the Apache distribution area and the artifacts to the central repo. Thank you! > On Feb 28, 2023, at 1:13 AM,

Re: 2023 March Board Report Draft

2023-03-13 Thread lenny
We also released 1.11.0 in January Otherwise LGTM > On Mar 13, 2023, at 5:12 PM, Brian Demers wrote: > > The 2023 March ASF board report is due soon. I've created an > initial draft here: > > https://svn.apache.org/repos/asf/shiro/board/2023-03.txt > > Comments, suggestions, and feedback are

Re: [Discuss] Move Shiro from JIRA to GitHub Issues

2023-03-31 Thread lenny
BIG +1 for me. Even easier, just have old issues in JIRA and new ones in GH. Also maybe GH discussions as well? > On Mar 31, 2023, at 8:40 AM, Brian Demers wrote: > > We received a suggestion from the last board report to consider switching > from JIRA to GitHub issues. > > The ASF JIRA instanc

[VOTE] Release Apache Shiro 2.0.0-alpha-2

2023-05-04 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-2 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1049 https://repository.apache.org/content/repositories/o

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-2

2023-05-04 Thread lenny
Lenny Primak: +1 > On May 4, 2023, at 5:12 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version > 2.0.0-alpha-2 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1049 > <ht

[SUCCESS][VOTE] Release Apache Shiro 2.0.0-alpha-2

2023-05-09 Thread lenny
Hi, The vote has passed with the following result: +1: François Papon, Jean-Baptiste Onofré, Lenny Primak PMC quorum: reached I will promote the source release zip file to the Apache distribution area and the artifacts to the central repo. Thank you! > On May 4, 2023, at 4:12 PM,

Re: [Discuss] Move Shiro from JIRA to GitHub Issues

2023-05-27 Thread lenny
Thank you! > On May 27, 2023, at 2:47 AM, Benjamin Marwell wrote: > > Since we all agreed here, I will now open the GitHub issues and discussions > in the next few days. If you're faster than me, feel welcome to do it > earlier. 😉 > > - Ben > > > > > On Thu, 27 Apr 2023, 14:39 Benjamin Marw

Re: Apache Shiro Vulnerabilities

2023-07-19 Thread lenny
Hi, Mihir, I am not quite sure what you are asking. Can you clarify what exact vulnerabilities you are referring to? Perhaps a link or two? Thank you > On Jul 18, 2023, at 7:39 AM, Mihir Chhaya wrote: > > Hello, > > I see the Authentication bypass vulnerability existing in almost every > re

[VOTE] Release Apache Shiro 2.0.0-alpha-3

2023-07-21 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-3 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1052 https://repository.apache.org/content/repositories/orgapacheshiro-1052/org/apache/shiro/shiro-root/2.0.0-alpha-3/shiro-root-2.0

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-3

2023-07-21 Thread lenny
Lenny Primak: +1 > On Jul 21, 2023, at 3:20 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version > 2.0.0-alpha-3 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1052 > https

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-3

2023-07-23 Thread lenny
dependency updates > On Jul 21, 2023, at 3:21 PM, le...@flowlogix.com wrote: > > Lenny Primak: +1 > >> On Jul 21, 2023, at 3:20 PM, le...@flowlogix.com wrote: >> >> This is a call to vote in favor of releasing Apache Shiro version >> 2.0.0-alpha-3

[FAIL][VOTE] Release Apache Shiro 2.0.0-alpha-3

2023-07-25 Thread lenny
at application for now > bugfix(hazelcast): updated hazelcast OSGi import to version 5 > upgrade m-bundle-p: solves last Reproducible Builds issue > > * Large number of dependency updates > > >> On Jul 21, 2023, at 3:21 PM, le...@flowlogix.com wrote: >> >> Lenny

[VOTE] Release Apache Shiro 2.0.0-alpha-3 (take 2)

2023-07-25 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-3 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1053 https://repository.apache.org/content/repositories/orgapacheshiro-1053/org/apache/shiro/shiro-root/2.0.0-alpha-3/shiro-root-2.0

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-3 (take 2)

2023-07-25 Thread lenny
Lenny Primak: +1 > On Jul 25, 2023, at 4:28 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version > 2.0.0-alpha-3 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1053 > https

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-3 (take 2)

2023-07-25 Thread lenny
Release Notes: Release Notes - Shiro - Version 2.0.0-alpha-3 * New Contributors: - Edgar Ramirez Fuentes * New Features: [#943] replace logback with log4j [#947] rewrite java tests to Junit-Jupiter [GH-904] Add Spring 6-related exclusions to Shiro BOM enh: added JPMS module names to JAR m

[SUCCESS][VOTE] Release Apache Shiro 2.0.0-alpha-3 (take 2)

2023-07-28 Thread lenny
Shiro 2.0.0-alpha-3 will be scheduled for release to maven central. Thank you! Vote Summary: François Papon: +1 Jean-Babtiste Onofré: +1 Lenny Primak: +1 > On Jul 27, 2023, at 1:13 AM, Jean-Baptiste Onofré wrote: > > +1 (binding) > > Regards > JB > > On Wed,

Re: 2023 September Board Report Draft

2023-09-12 Thread lenny
Looks great, thanks! > On Sep 12, 2023, at 3:53 PM, Brian Demers wrote: > > The 2023 September ASF board report is due tomorrow. I've created an > initial draft here: > > https://svn.apache.org/repos/asf/shiro/board/2023-09.txt > > Comments, suggestions, and feedback are welcome. Otherwise,

Re: Jenkins vs GitHub Actions

2023-10-29 Thread lenny
I (personal opinion) like Jenkins better. I like Groovy DSL better than YAML configuration, I like the fact that you can manage your own instances as agents, I like that it’s Java-based, etc. etc. I would like to keep Jenkins. > On Oct 29, 2023, at 4:05 AM, fpapon wrote: > > Hi all, > > As we

Re: [VOTE] Apache Shiro 1.13.0 release

2023-10-29 Thread lenny
Lenny Primak: -1 Patches unfortunately were not cherry-picked (discussed in the security slack) > On Oct 29, 2023, at 5:47 AM, fpapon wrote: > > Hi everyone, > > I submit Apache Shiro 1.13.0 release to your vote. > > Release Notes: > https://github.com/apache/shi

Re: [VOTE] Apache Shiro 1.13.0 release (#2)

2023-10-31 Thread lenny
Lenny Primak: +1 Thank you!!! > On Oct 31, 2023, at 4:13 AM, fpapon wrote: > > Hi everyone, > > I submit Apache Shiro 1.13.0 release to your vote. > > Release Notes: > https://github.com/apache/shiro/releases/tag/shiro-root-1.13.0 > > Sta

[VOTE] Release Apache Shiro 2.0.0-alpha-4

2023-11-07 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-4 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1057 https://repository.apache.org/content/repositories/orgapacheshiro-1057/org/apache/shiro/shiro-root/2.0.0-alpha-4/shiro-root-2.0

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-4

2023-11-08 Thread lenny
Lenny Primak: +1 > On Nov 7, 2023, at 4:55 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version > 2.0.0-alpha-4 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1057 > https

Re: [SUCCESS][VOTE] Release Apache Shiro 2.0.0-alpha-4

2023-11-11 Thread lenny
2.0.0-alpha-4 has been published! Thank you everyone! > On Nov 9, 2023, at 4:00 AM, Benjamin Marwell wrote: > > +1 > > > > > On Tue, 7 Nov 2023, 23:56 , > wrote: > This is a call to vote in favor of releasing Apache Shiro version > 2.0.0-alpha-4 > > Maven S

[RESULT][VOTE] Apache Shiro 2.0.0-alpha-4 release

2023-11-12 Thread lenny
Hi, This vote passed with the following result: +1 (binding): Jean-Baptiste Onofre, Benjamin Marwell, François Papon, Lenny Primak I'm promoting the artifacts on Central and dist.apache.org, I will then announce the release. Thanks all for your vote!

[ANNOUNCE] Apache Shiro 2.0.0-alpha-4 with fix CVE-2023-46750

2023-11-12 Thread lenny
The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.0-alpha-4 Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quick

Re: 2023 December Board Report Draft

2023-12-12 Thread lenny
LGTM. Thank you! > On Dec 12, 2023, at 12:17 PM, Brian Demers wrote: > > The 2023 December ASF board report is due tomorrow. I've created an > initial draft here: > > https://svn.apache.org/repos/asf/shiro/board/2023-12.txt > > Comments, suggestions, and feedback are welcome. Otherwise, it w

Re: How is the shiro-jaxrs magic supposed to work with JAX-RS in the OSGi web whiteboard?

2024-02-08 Thread lenny
Ok, I am glad it worked out. > On Feb 8, 2024, at 1:50 PM, Steinar Bang wrote: > >> Steinar Bang : > >> I'm using an OSGi Web Whiteboard component >> https://github.com/steinarb/oldalbum/blob/e8dbf374c6132694f0ad7c0d4026def355d5514e/oldalbum.web.api/src/main/java/no/priv/bang/oldalbum/web/

Re: [VOTE] Release Apache Shiro 2.0.0

2024-02-20 Thread lenny
Lenny Primak: +1 (binding) > On Feb 20, 2024, at 3:35 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version 2.0.0 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1059 > <https

[RESULT][VOTE] Apache Shiro 2.0.0 release

2024-02-27 Thread lenny
Hi, This vote passed with the following result: +1 (binding): Lenny Primak, Jean-Baptiste Onofre, Benjamin Marwell, François Papon +1 (non-binding): Jakub Herkel I'm promoting the artifacts on Central and dist.apache.org <http://dist.apache.org/> I will then announce the release.

Re: How is order from the [url] section preserved?

2024-03-07 Thread lenny
Without looking at the code, I would guess it’s stored in LinkedHashMap, which keeps track of the order, however, there are other map structures that keep order as well. > On Mar 7, 2024, at 1:31 PM, Steinar Bang wrote: > > I know from experience that the order of the [url] setion of the > shir

Re: [DISCUSS] Jakarta

2024-03-11 Thread lenny
Although I find the idea of top-level packages intriguing, I still think that we should just rip the band-aid off and go with Jakarta full-bore. This is due to SpringBoot dropping support for Java EE 8 mostly, but also for the goodness of Jakarta EE 11. > On Mar 11, 2024, at 10:52 AM, Brian Deme

Re: 2024 March Board Report Draft

2024-03-12 Thread lenny
LGTM. Thank you! > On Mar 12, 2024, at 9:30 PM, Brian Demers wrote: > > The 2024 March ASF board report is due tomorrow. I've created an initial > draft here: > > https://svn.apache.org/repos/asf/shiro/board/2024-03.txt > > Of note, the GitHub reporter statistics were not working, so this sec

[Discussion] Future version support of Java and Jakarta EE in Shiro

2024-03-14 Thread lenny
Hi, Since Shiro 2.0-alpha and 2.0 Final has been released, most, if not all questions we have been getting are about Jakarta EE integration. Mostly regarding shaded artifacts and their usage, i.e. jakarta.* namespace. These and other discussion warrant a few question worth discussing. Please keep

Re: [Discussion] Future version support of Java and Jakarta EE in Shiro

2024-04-04 Thread lenny
Looks like just one comment so far > On Apr 4, 2024, at 9:48 AM, Jean-Baptiste Onofré wrote: > > Hi Lenny, > > Did you receive comments on this thread ? > > Regards > JB > > On Fri, Mar 15, 2024 at 5:10 AM wrote: >> >> Hi, >> >> Since

Re: [Discussion] Future version support of Java and Jakarta EE in Shiro

2024-04-04 Thread lenny
rty library dependencies; some having migrated to > Jakarta-EE and some not (yet) > I've considered migrating to Spring Boot but don't see the cost/benefit given > we don't use embedded Tomcat > > On Thu, Apr 4, 2024 at 5:26 PM Lenny Primak <mailto:le...@flowlog

Re: get the authenticated user in spring controller method

2024-04-13 Thread lenny
Hi, Take a look at Shiro’s SpringBoot 3 example. This should get your started: https://github.com/apache/shiro/blob/main/samples/spring-boot-3-web/src/main/java/org/apache/shiro/samples/HelloController.java

Re: get the authenticated user in spring controller method

2024-04-13 Thread lenny
He Principal type depends on the Realm that you are using. The Principal type of Map is for example purposes only. In your code, you would substitute the type passed into byType() method with the appropriate type. Or you can use Subject.getPrincipal() that returns Object type and cast to appropri

Re: shiro-jaxrs of shiro 2.0.0: tests expecting 403 get 401 and tests expecting 401 get UnauthenticatedException

2024-04-28 Thread lenny
Hi, I believe this will be fixed in 2.0.1 See https://github.com/apache/shiro/issues/1383 for details. > On Apr 28, 2024, at 10:03 AM, Steinar Bang wrote: > > I'm trying to switch from shiro 1.13.0 to shiro 2.0.0 and I'm running > into test failure

Shiro 2.0.1 release

2024-04-28 Thread lenny
Hi, Looks like we are starting go get multiple issues submitted that are already slated to be fixed in 2.0.1 I am thinking to release 2.0.1 sooner rather than later. However, there are a few outstanding issues: https://github.com/apache/shiro/milestone/7

Re: Shiro 2.0.1 release

2024-04-29 Thread lenny
What do we do about outstanding issues though? Some more serious (OSGi?) > On Apr 29, 2024, at 9:23 AM, Jean-Baptiste Onofré wrote: > > It sounds good to me. > > Regards > JB > > On Sun, Apr 28, 2024 at 8:39 PM wrote: >> >> Hi, >> >> Looks like we are starting go get multiple issues submitt

Re: Shiro 2.0.1 release

2024-04-30 Thread lenny
Can’t we just remove versions from the OSGi manifests somehow? Or make it “servlet 2.x or greater”? I would think this would be the easiest solution :) Definitely move to jakarta.* in 3.x timeframe, but that’s long ways off :) > On Apr 30, 2024, at 1:51 AM, Francois Papon > wrote: > > I can s

Re: shiro-jaxrs of shiro 2.0.0: tests expecting 403 get 401 and tests expecting 401 get UnauthenticatedException

2024-05-20 Thread lenny
Sheesh, I think you are right :) > On May 20, 2024, at 4:01 PM, Steinar Bang wrote: > >>>>>> Steinar Bang : > >>>>>> lenny-5o6p1tln9c5dpfhejli6iq-xmd5yjdbdmrexy1tmh2...@public.gmane.org: >>> Hi, >>> I believe this will be fix

Re: shiro-jaxrs of shiro 2.0.0: tests expecting 403 get 401 and tests expecting 401 get UnauthenticatedException

2024-05-21 Thread lenny
There are plenty of tests already. They were all expecting flipped values, as the naming is very confusing. No need for any new tests. > On May 21, 2024, at 12:18 PM, Steinar Bang wrote: > >> Steinar Bang : > >> Would you like a port of my unit tests to the shiro-jaxrs project (a 200 >> OK

Re: shiro-jaxrs of shiro 2.0.0: tests expecting 403 get 401 and tests expecting 401 get UnauthenticatedException

2024-05-21 Thread lenny
Awesome! Thank you for your contributions and help! We appreciate it. > On May 21, 2024, at 4:45 PM, Steinar Bang wrote: > >>>>>> lenny-5o6p1tln9c5dpfhejli...@public.gmane.org > >> There are plenty of tests already. They were all expecting flipped values, >&

Re: shiro-jaxrs of shiro 2.0.0: tests expecting 403 get 401 and tests expecting 401 get UnauthenticatedException

2024-05-22 Thread lenny
Hi, That’s hardly enough to go on. Sounds like a configuration issue. Do you have a reproducer? > On May 22, 2024, at 12:33 PM, Steinar Bang wrote: > >>>>>> lenny-5o6p1tln9c5dpfhejli...@public.gmane.org: > >> Awesome! Thank you for your contributions an

Re: shiro-jaxrs of shiro 2.0.0: tests expecting 403 get 401 and tests expecting 401 get UnauthenticatedException

2024-05-23 Thread lenny
Ah, that’s a different world here unfortunately… you are on your own there > On May 23, 2024, at 11:59 AM, Steinar Bang wrote: > >>>>>> lenny-5o6p1tln9c5dpfhejli...@public.gmane.org: > >> That’s hardly enough to go on. Sounds like a configuration issue. >

[VOTE] Release Apache Shiro 2.0.1

2024-05-25 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.1 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1061 https://repository.apache.org/content/repositories/orgapaches

Re: [VOTE] Release Apache Shiro 2.0.1

2024-05-25 Thread lenny
I guess the release notes aren’t showing up: Here they are: Apache Shiro 2.0.1 Draft lprimak drafted this 7 hours ago · 3 commits 

Re: [VOTE] Release Apache Shiro 2.0.1

2024-05-25 Thread lenny
Lenny Primak: +1 (binding) > On May 25, 2024, at 8:02 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version 2.0.1 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1061 > <https

[RESULT][VOTE] Apache Shiro 2.0.1 release

2024-05-30 Thread lenny
Hi, This vote passed with the following result: +1 (binding): Lenny Primak, Jean-Baptiste Onofre, François Papon +1 (non-binding): Steinar Bang -1 (non-binding): Jakub Herkel I'm promoting the artifacts on Central and dist.apache.org <http://dist.apache.org/> I will then announce

[ANNOUNCE] Apache Shiro 2.0.1 Released!

2024-05-30 Thread lenny
The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.1 Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and

Re: 2024 June Board Report Draft

2024-06-13 Thread lenny
LGTM. Thanks Brian! > On Jun 13, 2024, at 10:26 AM, Francois Papon > wrote: > > LGTM > > Thanks Brian! > > On 13/06/2024 16:49, Brian Demers wrote: >> The 2024 June ASF board report was due yesterday. I've created an initial >> draft here: >> >> https://svn.apache.org/repos/asf/shiro/board/

Proposal: EOL for Shiro major versions

2024-07-01 Thread lenny
Here is my proposal: Shiro 1.x EOL at the end of 2024 Shiro 2.x EOL at the end of 2025 Shiro 3.x focus is: - Jakarta EE (non-shaded) - remove support for Java EE (remove dependency on javax.* namespace) - Remove “rawtypes” replace with Generics in the API - Prune abandoned / deprecated support m

Proposal: Change SNAPSHOT version template

2024-08-18 Thread lenny
Currently, main and 3.x branch has a SNAPSHOT version in a form of 3.0.0-SNAPSHOT My proposal is to change this to 3.x-SNAPSHOT and 2.x-SNAPSHOT (for 2.x maintenance version) respectively. There are a number of benefits to this, as explained in this article: https://www.cloudbees.com/blog/apach

Re: 2024 September Board Report Draft

2024-09-10 Thread lenny
Looks good to me. Thank you! > On Sep 10, 2024, at 3:26 PM, Brian Demers wrote: > > The 2024 September ASF board report is due tomorrow. I've created an > initial draft here: > > https://svn.apache.org/repos/asf/shiro/board/2024-09.txt > > Comments, suggestions, additions, and feedback are we

Reminder: [OVERDUE][VOTE] Release Apache Shiro 2.0.2

2024-11-12 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.2 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1062 https://repository.apache.org/content/repositories/orgapaches

[RESULT][VOTE] Apache Shiro 2.0.2 release

2024-11-13 Thread lenny
Hi, This vote passed with the following result: +1 (binding): Lenny Primak, François Papon, Benjamin Marwell +0 (non-binding): Jiri Jetmar I'm promoting the artifacts on Central and dist.apache.org <http://dist.apache.org/> I will then announce the release. Thanks all for your vote!

[Reminder] Shiro 2.0.2 is on vote

2024-11-08 Thread lenny
Thank you!

Re: [VOTE] Release Apache Shiro 2.0.2

2024-11-06 Thread lenny
Lenny Primak: +1 (binding) > On May 25, 2024, at 8:02 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version 2.0.2 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1062 > <https

[VOTE] Release Apache Shiro 2.0.3

2025-04-05 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.3 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1063 https://repository.apache.org/content/repositories/orgapacheshiro-1063/org/apache/shiro/shiro-root/2.0.3/shiro-root-2.0.3-source-releas

Re: [VOTE] Release Apache Shiro 2.0.3

2025-04-05 Thread lenny
Lenny Primak: +1 (binding) > On Apr 5, 2025, at 4:37 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version 2.0.3 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1063 > https://

Re: PAX - SHIRO

2025-04-07 Thread lenny
Hi Mihir, You are correct, Pax-Shiro is no longer maintained. Shiro 2.0 has all the features that used to be in Pax-Shiro (and many, many more) Please see https://shiro.apache.org/jakarta-ee.html You can probably remove most if not all related configuration because it’s no longer necessary in S

[RESULT][VOTE] Apache Shiro 2.0.3 release

2025-04-09 Thread lenny
Hi, This vote passed with the following result: +1 (binding): Lenny Primak, François Papon, Benjamin Marwell I'm promoting the artifacts on Central and dist.apache.org <http://dist.apache.org/> I will then announce the release. Thanks all for your vote!

Re: Is the cipherkey still a constant? (get rid of remember me stack traces in the log)

2025-04-09 Thread lenny
No, no. The cipher key should not be anywhere near your build process, maven, shiro.ini, etc. None of that is secure. > On Apr 9, 2025, at 12:50 PM, Steinar Bang wrote: > >>>>>> lenny-5o6p1tln9c5dpfhejli...@public.gmane.org: > >> a. No. It’s a Hex string wi

Re: Is the cipherkey still a constant? (get rid of remember me stack traces in the log)

2025-04-10 Thread lenny
famous last words he he :) > On Apr 10, 2025, at 11:47 AM, Steinar Bang wrote: > >>>>>> lenny-5o6p1tln9c5dpfhejli...@public.gmane.org: > >> No, no. >> The cipher key should not be anywhere near your build process, maven, >> shiro.ini, etc. >

Re: Is the cipherkey still a constant? (get rid of remember me stack traces in the log)

2025-04-08 Thread lenny
/security/CipherKeySource.java is the Shiro integration that provides it to Shiro itself. Hope this helps! > On Apr 8, 2025, at 12:18 PM, Steinar Bang wrote: > >>>>>> lenny-5o6p1tln9c5dpfhejli...@public.gmane.org: > >> The only thing I can think of is

Re: Is the cipherkey still a constant? (get rid of remember me stack traces in the log)

2025-04-06 Thread lenny
Hi, Sterinar, This is what I use to generate the key: openssl enc -aes-128-cbc -k secret -P -md sha256 Let me know if that works for you > On Apr 6, 2025, at 12:42 PM, Steinar Bang wrote: > > I'm trying to finally get rid of annoying log messages like this (error > messages that have plagued

Re: Is the cipherkey still a constant? (get rid of remember me stack traces in the log)

2025-04-06 Thread lenny
Yes, nothing changed there. > On Apr 6, 2025, at 2:19 PM, Steinar Bang wrote: > >>>>>> lenny-5o6p1tln9c5dpfhejli...@public.gmane.org: > >> Hi, Sterinar, >> This is what I use to generate the key: >> openssl enc -aes-128-cbc -k secret -P -md s

[RESULT][VOTE] Apache Shiro 2.0.4 release

2025-04-20 Thread lenny
Hi, This vote passed with the following result: +1 (binding): Lenny Primak, François Papon, Jean-Baptiste Onofré +1 (non-binding): Steinar Bang I'm promoting the artifacts on Central and dist.apache.org <http://dist.apache.org/> I will then announce the release. Thanks all for your vote!

Re: [VOTE] Release Apache Shiro 2.0.4

2025-04-18 Thread lenny
Hi, More votes are needed and appreciated. Thank you! > On Apr 16, 2025, at 8:58 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version 2.0.4 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1065 > https://

[ANNOUNCE] Apache Shiro 2.0.4 Released!

2025-04-22 Thread lenny
he Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.4 Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and e

Re: Critical bug found - Feedback requested

2025-04-14 Thread lenny
No, you are exactly right. That is what is necessary to explicitly propagate the Subject state to child threads. The fact that that state leaks into the child thread currently is the bug I am solving. > On Apr 14, 2025, at 12:16 PM, Tamás Cservenák wrote: > > I might be off, but I was using

Re: Critical bug found - Feedback requested

2025-04-14 Thread lenny
Well, 2 weeks isn’t that bad in the “grand scheme of things” To answer your question, No. If a thread wants access to SecurityManager, it needs to explicitly bind it. The implicit binding provided by ShiroFilter is solely for the servlet thread, not any other thread. > On Apr 14, 2025, at 2:14 A

Re: Is the cipherkey still a constant? (get rid of remember me stack traces in the log)

2025-04-12 Thread lenny
Probably related to this: https://github.com/apache/shiro/issues/1449 > On Apr 12, 2025, at 2:22 PM, Steinar Bang wrote: > >>>>>> Steinar Bang : >>>>>> lenny-5o6p1tln9c5dpfhejli6iq-xmd5yjdbdmrexy1tmh2...@public.gmane.org: >>> famous last words

Re: [VOTE] Release Apache Shiro 2.0.4

2025-04-16 Thread lenny
Lenny Primak: +1 (binding) > On Apr 16, 2025, at 8:58 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version 2.0.4 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1065 > https://

[VOTE] Release Apache Shiro 2.0.4

2025-04-16 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.4 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1065 https://repository.apache.org/content/repositories/orgapacheshiro-1065/org/apache/shiro/shiro-root/2.0.4/shiro-root-2.0.4-source-releas

Re: [Vote] New Shiro PMC Chair: Lenny Primak

2025-06-20 Thread lenny
Slack, but we need an official vote thread! >> >> Lenny has been a Shiro committer and PMC member for the last few years and >> has been helping move the project forward! >> I'd like to nominate Lenny to replace me as the next Shiro PMC Chair. >> >> If

Re: Apache Shiro help

2025-06-03 Thread lenny
Once again, thank you for getting back to us and looking at these issues. In general, we are having trouble upgrading to later versions of SpringBoot 3. There are warnings that no one of the Shiro team can figure out what to do with and how to fix. Regarding https://github.com/apache/shiro/pull/

Re: Apache Shiro help

2025-06-04 Thread lenny
Hi, Josh, I am in Central time and just got the email. Now for the next hour-and-a-half would work Would 10am CT work tomorrow? If not, it would have to be next week or the weekend if you are up for that. Thank you! > On Jun 4, 2025, at 4:03 AM, Josh Long wrote: > > Hi > > I am in Amsterdam t

[ANNOUNCE] Apache Shiro 2.0.5 Released!

2025-07-07 Thread lenny
The Apache Shiro team is pleased to announce the release of Apache Shiro version 2.0.5 Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. With Shiro’s easy-to-understand API, you can quickly and

[RESULT][VOTE] Apache Shiro 2.0.5 release

2025-07-07 Thread lenny
Hi, This vote passed with the following result: +1 (binding): Lenny Primak, François Papon, Benjamin Marwell I'm promoting the artifacts on Central and dist.apache.org <http://dist.apache.org/> I will then announce the release. Thanks all for your vote!

Re: [VOTE] Release Apache Shiro 2.0.5

2025-07-01 Thread lenny
Lenny Primak: +1 (binding) > On Jul 1, 2025, at 7:13 PM, le...@flowlogix.com wrote: > > This is a call to vote in favor of releasing Apache Shiro version 2.0.5 > > Maven Staging repo: > https://repository.apache.org/content/repositories/orgapacheshiro-1066 > https://

[VOTE] Release Apache Shiro 2.0.5

2025-07-01 Thread lenny
This is a call to vote in favor of releasing Apache Shiro version 2.0.5 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1066 https://repository.apache.org/content/repositories/orgapacheshiro-1066/org/apache/shiro/shiro-root/2.0.5/shiro-root-2.0.5-source-releas

Re: [ANNOUNCE] New Apache Shiro PMC Chair Lenny Primak

2025-07-28 Thread lenny
Thank you Brian and thank you Erik! > On Jul 28, 2025, at 4:39 PM, Erik Beeson wrote: > > Thank you Brian for all that you've done for the project, and thank you > Lenny for stepping up! > > --Erik > > > On Mon, Jul 28, 2025 at 1:17 PM Brian Demers wrote:

Re: [ANNOUNCE] Community Update: Working on 1.3 Release + Dedicated Shiro Staff

2016-06-27 Thread Lenny Primak
That's fantastic news congratulations Brian and Shiro team!! > On Jun 27, 2016, at 7:03 PM, Les Hazlewood wrote: > > Hi Apache Shiro Community! > > I know it has been a while since we last had a public community announcement, > and things have been very quiet due to Shiro's mostly-stable statu

Re: [SHIRO-206] JSF support

2021-08-02 Thread Lenny Primak
+1 for removing from 2.0 milestone The library is pretty useful and I may want to re-add it in the future once I get some time to work on Jakarta EE / CDI stuff in general. > On Aug 1, 2021, at 3:00 PM, Benjamin Marwell wrote: > > Hi everyone, > > we had a discussion in slack, that later ver

Re: 2022 December Board Report Draft

2022-12-16 Thread Lenny Primak
Thanks Brian! Looks good to me as well > On Dec 16, 2022, at 9:38 AM, Brian Demers wrote: > > The 2022 December ASF board report is due today. I've created an > initial draft here: > > https://svn.apache.org/repos/asf/shiro/board/2022-12.txt > > Comments, suggestions, and feedback are welcome

Re: [VOTE] Release Apache Shiro 1.11.0

2023-01-03 Thread Lenny Primak
Lenny Primak: +1 Thank you!!! > On Jan 3, 2023, at 7:54 PM, Brian Demers wrote: > > This is a call to vote in favor of releasing Apache Shiro version 1.11.0. > > We solved 2 Issues: > > https://issues.apache.org/jira/secure/IssueNavigator!executeAdvanced.jspa?jql=projec

Re: [VOTE] Release Apache Shiro 1.11.0

2023-01-08 Thread Lenny Primak
Lenny Primak: +1 (binding) Thank you! > On Jan 7, 2023, at 8:27 PM, Brian Demers wrote: > > This is a call to vote in favor of releasing Apache Shiro version 1.11.0. > > NOTE: This is the second attempt at this release, additional fixes > for SHIRO-889 have been added

  1   2   >