Since JB and Tim have been working out how to get Aries JAX-RS setup in Karaf, one possibly nice solution would be to just drop in the shiro (1.4.0) integration that Tim Ward wrote for the JAX-RS Whiteboard [1].
Sincerely, - Ray [1] https://github.com/apache/aries-jax-rs-whiteboard/tree/master/integrations/shiro On Fri, Nov 23, 2018 at 11:09 AM Steinar Bang <[email protected]> wrote: > I'm in the process of trying to move from my use of Shiro 1.3.1 to > provide authentication and authorization to a webapp, to Shiro 1.4.x. > > Problems so far: > 1. shiro-core requires spring-beans in a manifest.mf import-package, in > addition to being an extra dependency, spring-beans and its > dependencies aren't OSGi bundles, so karaf needs to wrap them > 2. Classloader issues, because Shiro 1.4.x uses reflection to create > classes > > Details can be provided if of interest, but I imaging anyone who's tried > usign Shiro 1.4.x have quickly encountered the classloader issue...:-) > > I have been pondering how to proceed with this. Some possible > approaches: > 1. Try to satisify all the runtime dependencies that the classes that > currently won't load, requires (I'm not sure if this is even > possible?) > 2. Slurp all of shiro-core into my bundle (not a desirable approach, > since I would like to have pluggable realms) > 3. Create a new bundle wrapping shiro-core, and adding a DS component > that instantates and exposes a SecurityManager service > 4. Other...? > > Thanks! > > > Steinar > > > -- *Raymond Augé* <http://www.liferay.com/web/raymond.auge/profile> (@rotty3000) Senior Software Architect *Liferay, Inc.* <http://www.liferay.com> (@Liferay) Board Member & EEG Co-Chair, OSGi Alliance <http://osgi.org> (@OSGiAlliance)
