WrenSecurity / wrenam

Community fork of OpenAM, an authentication and authorization system originally developed by ForgeRock.
Other
43 stars 27 forks source link

Get rid of Apache Cargo Maven plugin #3

Open pavelhoral opened 7 years ago

pavelhoral commented 7 years ago

I propose to get rid of Apache Cargo Maven plugin. This plugin is used to merge WAR based modules openam-server-only and openam-console into openam-server. Due to that openam-server has uberwar as it's packaging definition, which makes extending that project somewhat hard.

Merging WAR modules can be achieved via Maven's WAR plugin overlay feature. The only thing this plugin is not capable of is merging web.xml. So to overcome that maybe we also can migrate to web-fragment.xml.

Benefits:

pavelhoral commented 1 year ago

Thing to consider: We might want to restrain from using web fragments as those are usually subject of security checks (e.g. CIS Benchmarks for Tomcat).