[seam-issues] [JBoss JIRA] Reopened: (SEAMSECURITY-41) openid4java dependencies missing in the dist. bundle

[Jozef Hartinger (JIRA)]

     [ https://issues.jboss.org/browse/SEAMSECURITY-41?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jozef Hartinger reopened SEAMSECURITY-41:
-----------------------------------------



I found the root cause of the problem. The following pom file definitions differ although they have the same group id + artifact id + version + classifier:

https://repository.jboss.org/nexus/content/repositories/deprecated/org/openid4java/openid4java/0.9.5/openid4java-0.9.5.pom
http://repo1.maven.org/maven2/org/openid4java/openid4java/0.9.5/openid4java-0.9.5.pom

I assume you have enabled the deprecated repository in your settings.xml file. Note that we cannot assume that this applies to a random user and thus we should probably add explicit excludes.

> openid4java dependencies missing in the dist. bundle
> ----------------------------------------------------
>
>                 Key: SEAMSECURITY-41
>                 URL: https://issues.jboss.org/browse/SEAMSECURITY-41
>             Project: Seam Security
>          Issue Type: Bug
>    Affects Versions: 3.0.0.CR1
>            Reporter: Jozef Hartinger
>            Assignee: Shane Bryzak
>
> The openid4java declares following transitive dependencies:
> {noformat}
> +- org.openid4java:openid4java:jar:0.9.5:compile
> |  +- org.openid4java:openid4java-consumer:jar:0.9.5:compile
> |  |  +- org.openid4java:openid4java-nodeps:jar:0.9.5:compile
> |  |  \- net.sourceforge.nekohtml:nekohtml:jar:1.9.7:compile
> |  +- org.openid4java:openid4java-server:jar:0.9.5:compile
> |  +- org.openid4java:openid4java-server-JdbcServerAssociationStore:jar:0.9.5:compile
> |  |  \- org.springframework:spring-jdbc:jar:2.0.6:compile
> |  |     +- org.springframework:spring-beans:jar:2.0.6:compile
> |  |     +- org.springframework:spring-context:jar:2.0.6:compile
> |  |     |  \- aopalliance:aopalliance:jar:1.0:compile
> |  |     +- org.springframework:spring-core:jar:2.0.6:compile
> |  |     \- org.springframework:spring-dao:jar:2.0.6:compile
> |  +- org.openid4java:openid4java-consumer-SampleConsumer:jar:0.9.5:compile
> |  \- org.openid4java:openid4java-server-SampleServer:jar:0.9.5:compile
> {noformat}
> None of these is present in the Seam 3.0.0.CR2 distribution bundle. These dependencies shoul either be added to the bundle or excluded from the dependency definition.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira