Spring Security
  1. Spring Security
  2. SEC-2118

Update Spring Security 3.1.x to work with Spring Framework 3.2.0 in a OSGI container

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 3.1.3
    • Fix Version/s: 3.1.4, 3.2.0.M2
    • Component/s: Build and Admin
    • Labels:
      None
    • Environment:
      Apache Felix OSGI Runtime container 4.0.3

      Description

      The MANIFEST.MF file in the the 3 Spring Security jars contains Import-Package declarations with a version range that excludes Spring 3.2.0.RELEASE

      (eg. org.springframework.beans;version="[3.0.7.RELEASE, 3.2.0)")
      In an OSGI environment where Spring 3.2 is deployed, the Spring Security bundle can't be deployed as the Import Packages doesn't include 3.2.0 in the version range.

      In attachment you can find patched jars with an update MANIFEST.MF

        Issue Links

          Activity

          Hide
          Wim Bervoets added a comment -

          @Rob, let's agree we differ opinion on the type of ticket (for us it is a critical bug as one would expect that the latest stable version of Spring security can be used with the latest stable spring framework version; there are no docs that say otherwise)
          Why not make the Spring Security 3.1.x branch more stable then it already is, so we don't need to create patched jars For most of your users it'll be only updating a version tag in Maven pom.xml file...

          Show
          Wim Bervoets added a comment - @Rob, let's agree we differ opinion on the type of ticket (for us it is a critical bug as one would expect that the latest stable version of Spring security can be used with the latest stable spring framework version; there are no docs that say otherwise) Why not make the Spring Security 3.1.x branch more stable then it already is, so we don't need to create patched jars For most of your users it'll be only updating a version tag in Maven pom.xml file...
          Hide
          Rob Winch added a comment -

          Due to the popularity of this issue, we will be making a 3.1.4 release sometime next week. The OSGi version will be following within a week of the release. I understand that the delay with the OSGi version is not ideal, but given our current situation this is the best we can do. Please stay tuned to this issue and/or springsource.org for the release announcement. I will also post on this ticket when additional information about the OSGi version becomes available.

          Show
          Rob Winch added a comment - Due to the popularity of this issue, we will be making a 3.1.4 release sometime next week. The OSGi version will be following within a week of the release. I understand that the delay with the OSGi version is not ideal, but given our current situation this is the best we can do. Please stay tuned to this issue and/or springsource.org for the release announcement. I will also post on this ticket when additional information about the OSGi version becomes available.
          Hide
          Rob Winch added a comment -

          We have released 3.1.4, and expect the OSGi version later this week. See http://www.springsource.org/node/22598

          Show
          Rob Winch added a comment - We have released 3.1.4, and expect the OSGi version later this week. See http://www.springsource.org/node/22598
          Hide
          Rob Winch added a comment -

          You can now find the 3.1.4 release in the EBR

          Show
          Rob Winch added a comment - You can now find the 3.1.4 release in the EBR
          Hide
          Wim Bervoets added a comment -

          Thanks, works great

          Show
          Wim Bervoets added a comment - Thanks, works great

            People

            • Assignee:
              Rob Winch
              Reporter:
              Wim Bervoets
            • Votes:
              15 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: