[SWS-705] OSGi import of org.springframework.security.authentication seems to be the wrong version Created: 28/Apr/11  Updated: 04/May/12  Resolved: 19/May/11

Status: Closed
Project: Spring Web Services
Component/s: Security
Affects Version/s: 2.0 GA
Fix Version/s: 2.0.2

Type: Bug Priority: Major
Reporter: Aaron Sutula Assignee: Arjen Poutsma
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: 0d
Time Spent: 1m
Original Estimate: Not Specified

Virgo OSGi

Reference URL: http://forum.springframework.org/showthread.php?t=108577


I'm using an OSGi bundle from the Springsource Enterprise Bundle Repository, org.springframework.ws.soap.security_2.0.0.RELEASE . This bundle imports the package org.springframework.security.authentication at version="[2.0.0,3.0.0)" (to clarify, this means greater than or equal to 2.0.0 and less than 3.0.0). This same import information still seems to be in the Spring WS trunk. The org.springframework.security.authentication package is provided by Spring Security Core, but that package doesn't seem to exist in versions of Spring Securtiy Core prior to 3.0.0. This is causing org.springframework.ws.soap.security to be unable to resolve its dependency on Spring Security Core.

Comment by Aaron Sutula [ 28/Apr/11 ]

Looking at this more, I see the Spring WS parent pom specifies use of Spring Security Core 3.0.2. So the issue seems to be that the template.mf file for the Spring WS security module was not updated to reflect that: https://fisheye.springsource.org/browse/spring-ws/trunk/security/template.mf?hb=true. It still constrains use of Spring Security Core from [2.0.0-3.0.0).

Comment by Arjen Poutsma [ 19/May/11 ]

This is now fixed: I changed the OSGi range to [3.0.0, 4.0.0)

Comment by Arjen Poutsma [ 04/May/12 ]

Closing old issues

Generated at Thu Apr 02 04:41:21 UTC 2020 using Jira 7.13.8#713008-sha1:1606a5c1e7006e1ab135aac81f7a9566b2dbc3a6.