Remove SecurityManager usage and references

jakartaee / rest

Jakarta RESTful Web Services

Other

351 stars 114 forks source link

Remove SecurityManager usage and references #1262

Open jim-krueger opened 1 month ago

jim-krueger commented 1 month ago

The SecurityManager has been deprecated in JDK 11 (I believe) and removed in JDK 18+. The JAkarta Rest APIs should be cleaned to removed all usage and references going forward.

For sure these API's a affected and possibly more:

jakarta/ws/rs/sse/FactoryFinder.java
jakarta/ws/rs/ext/RuntimeDelegate.java
jakarta/ws/rs/ext/FactoryFinder.java
jakarta/ws/rs/client/FactoryFinder.java
jakarta/ws/rs/client/ClientBuilder.java

jamezp commented 1 month ago

FWIW it has not yet been removed, but you have to explicitly enable it. It was deprecated in 17 with https://openjdk.org/jeps/411. It does however still work if you explicitly enable it.

AFAIK there is not an explicit version set for it to be removed in.

That said, it's been removed from the Jakarta EE 11 Platform specification https://github.com/jakartaee/platform/issues/551.

All that said, addressing this in 5.0 makes sense to me.

jim-krueger commented 1 month ago

Thanks for the clarification James.