Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-13889

Ongoing review of modules depending on PicketBox

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Open (View Workflow)
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: 25.0.0.Final
    • Component/s: Security
    • Labels:
      None
    • [QE] How to address?:
      ---
    • [QE] Why QE missed?:
      ---

      Description

      This follows up from WFLY-13679, ongoing work is needed to ensure PicketBox is not needed at all. The PicketBox module depends on APIs removed in Java 14 so we need to be able to eliminate it completely if legacy security it not being used.

      At the same time some subsystems are defaulting to legacy security with additional configuration being required to force configuration over to an Elytron configuration, in some cases this applies even if the underlying configuration is not using security at all such as JCA resource adaptors.

      We should be looking at what we can do to detect the presence of legacy security and now if not provisioned we should be able to default to Elytron based security.

       

      $ find -name module.xml | xargs grep org.picketbox | grep -v optional
      ./system/layers/base/org/wildfly/extension/picketlink/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/wildfly/extension/messaging-activemq/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/wildfly/iiop-openjdk/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/apache/activemq/artemis/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/picketlink/federation/bindings/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/picketlink/federation/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/vault-tool/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/webservices/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/connector/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/security-plugins/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/ejb3/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/appclient/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/security-api/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/security/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/as/security-integration/main/module.xml:        <module name="org.picketbox">
      ./system/layers/base/org/jboss/ws/cxf/jbossws-cxf-client/main/module.xml:        <module name="org.picketbox" export="true"/>
      ./system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/ws/jaxws-client/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/ironjacamar/impl/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/jboss/security/negotiation/main/module.xml:        <module name="org.picketbox"/>
      ./system/layers/base/org/picketbox/main/module.xml:<module name="org.picketbox" xmlns="urn:jboss:module:1.9">
      ./system/layers/base/org/picketbox/main/module.xml:        <artifact name="org.picketbox:picketbox:5.0.3.Final-redhat-00007"/>
      ./system/layers/base/org/picketbox/main/module.xml:        <artifact name="org.picketbox:picketbox-infinispan:5.0.3.Final-redhat-00007"/>
      ./system/layers/base/org/picketbox/main/module.xml:        <artifact name="org.picketbox:picketbox-commons:1.0.0.final"/> 

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              dlofthouse Darran Lofthouse
              Reporter:
              dlofthouse Darran Lofthouse
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated: