>>>>> Steinar Bang <[email protected]>: > I'm in the process of trying to move from my use of Shiro 1.3.1 to > provide authentication and authorization to a webapp, to Shiro 1.4.x.
> Problems so far: > 1. shiro-core requires spring-beans in a manifest.mf import-package, in > addition to being an extra dependency, spring-beans and its > dependencies aren't OSGi bundles, so karaf needs to wrap them I reported this as a JIRA issue and provided a pull request to fix it https://issues.apache.org/jira/browse/SHIRO-655 It's an indirect runtime dependency: shiro-core depends on packages from commons-configuration2 2.1, which in its MANIFEST.MF has non-optional dependencies on springframework packages. The fix in the PR is a version bump of commons-configuration2 to 2.2, which has made the springframework package imports in MANIFEST.MF optional.
