WrenSecurity / wrensec-commons

Community fork of ForgeRock Commons, which contains common utility code used by multiple products originally developed by ForgeRock.
http://wrensecurity.org
0 stars 10 forks source link

Json web token subproject abuses javax.xml.bind.DatatypeConverter #25

Open krystofNovotny opened 3 years ago

krystofNovotny commented 3 years ago

Since Java 11, Jaxb is no longer a part of JDK (https://openjdk.java.net/jeps/320 )

In json-web-token project, DatatypeConverter is used just for parsing hex binaries. This will introduce unnecessary dependency on Jaxb once the project is compatible with Java 11.

It might be worth it to replace those usages with something more appropriate.