[security-dev] PicketLink3 and Apache Deltaspike Dependencies

[Jason Porter]

Is there anything in v0.4 you need, or can you simply get by with v0.3

Sent from my iPhone

On Feb 14, 2013, at 17:29, Anil Saldhana <Anil.Saldhana at redhat.com> wrote:

> Scratch this plan.  Shane and I determined that this is larger than we
> originally thought -> lots of DS classes need to be forked.
> 
> 
> On 02/13/2013 10:25 AM, Anil Saldhana wrote:
>> Hi all,
>>    PicketLink3 is on the final stretch of release cycles.  One of the
>> concerns I have had is the Apache Deltaspike dependency which is some
>> type of incubating snapshot. Since there are very few Deltaspike classes
>> (3-5 in number) that we depend on, the following strategy should work:
>> - Copy the source files (Retaining Apache Headers) as it is from Apache
>> Deltaspike to a PicketLink namespace such as : org.picketlink.deltaspike.*
>> - Remove the Apache Deltaspike dependency.
>> 
>> In few months, when Apache Deltaspike has proper releases, we can remove
>> the PicketLink Deltaspike forked classes and bring back the Apache
>> Deltaspike dependency back.  I do not think PicketLink users will
>> directly code to DS classes.
>> 
>> I ran this with Pete Muir, Shane and Jason Porter and they all agreed
>> that this is a good strategy (I did refine the strategy based on Shane's
>> comments).
>> 
>> Regards,
>> Anil
> _______________________________________________
> security-dev mailing list
> security-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/security-dev