> This class attempts to use EhCacheManager as the default cache manager, if > Ehcache is in the classpath. If it's not, then there is no cache manager. > This breaks SimpleAccountRealm and anything that inherits from it, i.e. > PropertiesRealm, the default realm. So, if Ehcache is not in the classpath, > the default behavior of JSecurity is broken. > > IMO, we should either make a hard dependency on Ehcache or make > HashtableCacheManager the default cache manager.
I think it makes sense to fall back to HashtableCacheManager as the default. It might also be worth considering taking a leaf out of the SLF4J book and having an adapter jar such as "ehcache-manager.jar" that users can depend on or not. Cheers, Peter
