Date: Tue, 19 Mar 2024 05:37:42 +0000 (UTC)
Message-ID: <770974464.54377.1710826662701@cwiki-he-fi.apache.org>
Subject: Exported From Confluence
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_Part_54376_507967687.1710826662700"
------=_Part_54376_507967687.1710826662700
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Content-Location: file:///C:/exported.html
3.3 Migration Guide
3.3 Migration Guide
New Features:
- Support for signing HTTP messages via the HTTP Signature draft spec is =
included (https://tools.ietf.org/html/dr=
aft-cavage-http-signatures) in the cxf-rt-rs-security-http-signature mo=
dule.
- Initial support for Java 11 - CXF has been built and tested with Java 1=
1. It is not using the Java 11 modules, but it can be built and=
the tests pass with Java 11.
- MicroProfile Rest Client v1.2 implementation
Claims Handling:
- The claimType of the Claim class is now a "String" =
instead of a "URI". This might break existing ClaimsHandler implement=
ations in the STS. In addition, the ClaimsHandler interface now returns a L=
ist<String> for getSupportedClaimTypes() instead of List<URI>.<=
/li>
- The Claims access control annotations/interceptors now work with JWT tokens (as well as SAML tokens). This resulted i=
n the following package changes:
- ClaimsAuthorizingInterceptor has moved from the cxf-rt-security-saml mo=
dule to the cxf-rt-security module. The package name of the ClaimsAuthorizi=
ngInterceptor has changed: from org.apache.cxf.rt.security.saml.interceptor=
.ClaimsAuthorizingInterceptor to org.apache.cxf.rt.security.claims.intercep=
tor.ClaimsAuthorizingInterceptor.
- ClaimsAuthorizingFilter has moved from the cxf-rt-rs-security-xml modul=
e to the cxf-rt-frontend-jaxrs module. The package name of the ClaimsAuthor=
izingFilter has changed: from org.apache.cxf.rs.security.saml.authori=
zation.ClaimsAuthorizingFilter to org.apache.cxf.jaxrs.security.Claims=
AuthorizingFilter
Major dependency ch=
anges:
- Spring and Spring Security have been upgraded to 5.x, the Spring Boot d=
ependency is now 2.x. However old versions will currently still work.
- JAX-RS and JAXB APIs are now JakartaEE dependencies. All other JakartaE=
E dependencies will follow with the next major release. Old dependencies ca=
n still be used, but this requires exclusions to avoid duplicate transitive=
dependencies (currently no relocation is in place).
Removed Features:
- The Apache HTrace module was removed as HTrace has been retired
- EhCache 2 OAUTH provider removed - users can use the JCache implementation with EhCache 3
<=
span style=3D"color: rgb(51,51,51);">
------=_Part_54376_507967687.1710826662700--