You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by "davsclaus (via GitHub)" <gi...@apache.org> on 2026/06/16 14:01:16 UTC
[PR] CAMEL-23773: camel-cxf - make ws-security optional to avoid opensaml/shibboleth dependency [camel]
davsclaus opened a new pull request, #24054:
URL: https://github.com/apache/camel/pull/24054
## Summary
_Claude Code on behalf of Claus Ibsen_
- Make `cxf-rt-ws-security` optional in `camel-cxf-soap` so most CXF users avoid the 13+ transitive `org.opensaml` JARs hosted on the unreliable `build.shibboleth.net` repository
- Extract wss4j-dependent cert extraction from `DefaultCxfBinding` into a new `WsSecurityHelper` class that is only loaded when wss4j is on the classpath (classpath detection via `Class.forName`)
- Exclude `org.opensaml:*` transitives from `cxf-rt-ws-security` in both `camel-cxf-soap` (optional/compile) and `camel-cxf-spring-soap` (test scope)
- Remove the now-unnecessary `.mvn/rrf/groupId-B_shibboleth.txt` Maven Repository Resolution Filter since no module resolves opensaml artifacts anymore
- Add upgrade guide entry documenting the change and how users who need WS-Security/OpenSAML can add the dependencies explicitly
## Test plan
- [x] `mvn verify` passes for `camel-cxf-soap` (compilation with optional wss4j, opensaml excluded)
- [x] `mvn verify` passes for `camel-cxf-spring-soap` — all 158 tests pass including 4 WS-Security tests (signature, encryption, username token, security policy)
- [x] `mvn dependency:tree -Dincludes=org.opensaml` confirms zero opensaml artifacts in both modules
- [ ] CI full build
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Closes: https://issues.apache.org/jira/browse/CAMEL-23773
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] CAMEL-23773: camel-cxf - make ws-security optional to avoid opensaml/shibboleth dependency [camel]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #24054:
URL: https://github.com/apache/camel/pull/24054#issuecomment-4719725716
:star2: Thank you for your contribution to the Apache Camel project! :star2:
:robot: CI automation will test this PR automatically.
:camel: Apache Camel Committers, please review the following items:
* First-time contributors **require MANUAL approval** for the GitHub Actions to run
* You can use the command `/component-test (camel-)component-name1 (camel-)component-name2..` to request a test from the test bot although they are normally detected and executed by CI.
* You can label PRs using `skip-tests` and `test-dependents` to fine-tune the checks executed by this PR.
* Build and test logs are available in the summary page. **Only** [Apache Camel committers](https://camel.apache.org/community/team/#committers) have access to the summary.
:warning: Be careful when sharing logs. Review their contents before sharing them publicly.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] CAMEL-23773: camel-cxf - make ws-security optional to avoid opensaml/shibboleth dependency [camel]
Posted by "davsclaus (via GitHub)" <gi...@apache.org>.
davsclaus merged PR #24054:
URL: https://github.com/apache/camel/pull/24054
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org