Ongoing review of modules depending on PicketBox ------------------------------------------------ Key: WFLY-13889 URL: https://issues.redhat.com/browse/WFLY-13889 Project: WildFly Issue Type: Task Components: Security Reporter: Darran Lofthouse Assignee: Darran Lofthouse Priority: Major Fix For: 23.0.0.Beta1 This follows up from WFLY-13679, ongoing work is needed to ensure PicketBox is not needed at all. The PicketBox module depends on APIs removed in Java 14 so we need to be able to eliminate it completely if legacy security it not being used. At the same time some subsystems are defaulting to legacy security with additional configuration being required to force configuration over to an Elytron configuration, in some cases this applies even if the underlying configuration is not using security at all such as JCA resource adaptors. We should be looking at what we can do to detect the presence of legacy security and now if not provisioned we should be able to default to Elytron based security.