You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ofbiz.apache.org by Jacques Le Roux <ja...@les7arts.com> on 2024/03/24 08:51:00 UTC
Shiro and Maven
Hi,
We (the Apache OFBiz project) use Shiro mostly for ciphering.
We use Gradle and refer to Maven for dependencies.
We recently upgraded from 1.13.0 to 2.0.0
https://issues.apache.org/jira/browse/OFBIZ-12961
As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
It did not work (mostly AesCipherService creation compile errors).
I then tried only shiro-crypto:2.0.0 and It worked.
Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz
So I added them with https://github.com/apache/ofbiz-framework/commit/61f5831400 This morning I removed them and tried to add shiro-core:2.2.0, to no
avail.
If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies? Thanks in advance
Jacques
Re: Shiro and Maven
Posted by le...@flowlogix.com.
Glad to help!
> On Mar 24, 2024, at 1:45 PM, Jacques Le Roux <ja...@les7arts.com> wrote:
>
> It was that.
>
> In Gradle I used
> org.apache.shiro:shiro-crypto:2.0.0
> instead of
> org.apache.shiro:shiro-crypto-cipher:2.0.0
> I started from https://mvnrepository.com/artifact/org.apache.shiro <https://mvnrepository.com/artifact/org.apache.shiro> using core then switched to crypto, forgoting cipher.
>
> I don't work how that worked in a situation (w/ OFBiz plugins) and not another (w/o OFBiz plugins).
> As you suggested (pulling in the old version somewhere unexpectedly) maybe the reason.
> Though I tried with Gradle --no-cache-build. Anyway who cares now ;)
>
> Remains an issue with HashRequest. I'll have a look at https://github.com/apache/shiro/issues/1022 <https://github.com/apache/shiro/issues/1022>
> And https://www.google.fr/search?q=%22shiro+2.0.0%22+Hash&ie=UTF-8 <https://www.google.fr/search?q=%22shiro+2.0.0%22+Hash&ie=UTF-8> globally
> It's time for us to envisage argon or such...
>
> Thanks again
>
> Jacques
>
> Le 24/03/2024 à 17:35, lenny@flowlogix.com <ma...@flowlogix.com> a écrit :
>> Make sure to look at the dependency tree, I bet you are pulling in the old version somewhere unexpectedly.
>>
>>> On Mar 24, 2024, at 11:32 AM, Jacques Le Roux <ja...@les7arts.com> <ma...@les7arts.com> wrote:
>>>
>>> Thanks Lenny,
>>>
>>> Oops, indeed it should be 2.0.0 everywhere. Else nothing would work ;)
>>>
>>> I did not want to repeat all what's in links, that why I just put links.
>>>
>>> Anyway, I'll have a look at Crypto classes’ package names, easier than anything else.
>>> I'm though surprised that it works with current names when we have the 3 org.apereo.cas packages in the classpath.
>>>
>>> Maybe we miss something else...
>>>
>>> Jacques
>>>
>>> Le 24/03/2024 à 15:54, lenny@flowlogix.com <ma...@flowlogix.com> <ma...@flowlogix.com> <ma...@flowlogix.com> a écrit :
>>>> I am not quite sure that there enough information here to help…
>>>> First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
>>>>
>>>> Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
>>>>
>>>>> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux <ja...@les7arts.com> <ma...@les7arts.com> <ma...@les7arts.com> <ma...@les7arts.com> wrote:
>>>>>
>>>>> Hi,
>>>>>
>>>>> We (the Apache OFBiz project) use Shiro mostly for ciphering.
>>>>> We use Gradle and refer to Maven for dependencies.
>>>>>
>>>>> We recently upgraded from 1.13.0 to 2.0.0
>>>>> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961>
>>>>> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
>>>>> It did not work (mostly AesCipherService creation compile errors).
>>>>>
>>>>> I then tried only shiro-crypto:2.0.0 and It worked.
>>>>>
>>>>> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
>>>>> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>>>>>
>>>>> So I added them with https://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>>>>>
>>>>> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>>>>>
>>>>> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>>>>>
>>>>> Thanks in advance
>>>>>
>>>>> Jacques
>>>>>
Re: Shiro and Maven
Posted by le...@flowlogix.com.
Glad to help!
> On Mar 24, 2024, at 1:45 PM, Jacques Le Roux <ja...@les7arts.com> wrote:
>
> It was that.
>
> In Gradle I used
> org.apache.shiro:shiro-crypto:2.0.0
> instead of
> org.apache.shiro:shiro-crypto-cipher:2.0.0
> I started from https://mvnrepository.com/artifact/org.apache.shiro <https://mvnrepository.com/artifact/org.apache.shiro> using core then switched to crypto, forgoting cipher.
>
> I don't work how that worked in a situation (w/ OFBiz plugins) and not another (w/o OFBiz plugins).
> As you suggested (pulling in the old version somewhere unexpectedly) maybe the reason.
> Though I tried with Gradle --no-cache-build. Anyway who cares now ;)
>
> Remains an issue with HashRequest. I'll have a look at https://github.com/apache/shiro/issues/1022 <https://github.com/apache/shiro/issues/1022>
> And https://www.google.fr/search?q=%22shiro+2.0.0%22+Hash&ie=UTF-8 <https://www.google.fr/search?q=%22shiro+2.0.0%22+Hash&ie=UTF-8> globally
> It's time for us to envisage argon or such...
>
> Thanks again
>
> Jacques
>
> Le 24/03/2024 à 17:35, lenny@flowlogix.com <ma...@flowlogix.com> a écrit :
>> Make sure to look at the dependency tree, I bet you are pulling in the old version somewhere unexpectedly.
>>
>>> On Mar 24, 2024, at 11:32 AM, Jacques Le Roux <ja...@les7arts.com> <ma...@les7arts.com> wrote:
>>>
>>> Thanks Lenny,
>>>
>>> Oops, indeed it should be 2.0.0 everywhere. Else nothing would work ;)
>>>
>>> I did not want to repeat all what's in links, that why I just put links.
>>>
>>> Anyway, I'll have a look at Crypto classes’ package names, easier than anything else.
>>> I'm though surprised that it works with current names when we have the 3 org.apereo.cas packages in the classpath.
>>>
>>> Maybe we miss something else...
>>>
>>> Jacques
>>>
>>> Le 24/03/2024 à 15:54, lenny@flowlogix.com <ma...@flowlogix.com> <ma...@flowlogix.com> <ma...@flowlogix.com> a écrit :
>>>> I am not quite sure that there enough information here to help…
>>>> First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
>>>>
>>>> Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
>>>>
>>>>> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux <ja...@les7arts.com> <ma...@les7arts.com> <ma...@les7arts.com> <ma...@les7arts.com> wrote:
>>>>>
>>>>> Hi,
>>>>>
>>>>> We (the Apache OFBiz project) use Shiro mostly for ciphering.
>>>>> We use Gradle and refer to Maven for dependencies.
>>>>>
>>>>> We recently upgraded from 1.13.0 to 2.0.0
>>>>> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961>
>>>>> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
>>>>> It did not work (mostly AesCipherService creation compile errors).
>>>>>
>>>>> I then tried only shiro-crypto:2.0.0 and It worked.
>>>>>
>>>>> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
>>>>> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>>>>>
>>>>> So I added them with https://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>>>>>
>>>>> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>>>>>
>>>>> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>>>>>
>>>>> Thanks in advance
>>>>>
>>>>> Jacques
>>>>>
Re: Shiro and Maven
Posted by Jacques Le Roux <ja...@les7arts.com>.
It was that.
In Gradle I used
org.apache.shiro:shiro-crypto:2.0.0
instead of
org.apache.shiro:shiro-crypto-cipher:2.0.0
I started from https://mvnrepository.com/artifact/org.apache.shiro using core then switched to crypto, forgoting cipher.
I don't work how that worked in a situation (w/ OFBiz plugins) and not another (w/o OFBiz plugins).
As you suggested (pulling in the old version somewhere unexpectedly) maybe the reason.
Though I tried with Gradle --no-cache-build. Anyway who cares now ;)
Remains an issue with HashRequest. I'll have a look at https://github.com/apache/shiro/issues/1022
And https://www.google.fr/search?q=%22shiro+2.0.0%22+Hash&ie=UTF-8 globally
It's time for us to envisage argon or such...
Thanks again
Jacques
Le 24/03/2024 à 17:35, lenny@flowlogix.com a écrit :
> Make sure to look at the dependency tree, I bet you are pulling in the old version somewhere unexpectedly.
>
>> On Mar 24, 2024, at 11:32 AM, Jacques Le Roux<ja...@les7arts.com> wrote:
>>
>> Thanks Lenny,
>>
>> Oops, indeed it should be 2.0.0 everywhere. Else nothing would work ;)
>>
>> I did not want to repeat all what's in links, that why I just put links.
>>
>> Anyway, I'll have a look at Crypto classes’ package names, easier than anything else.
>> I'm though surprised that it works with current names when we have the 3 org.apereo.cas packages in the classpath.
>>
>> Maybe we miss something else...
>>
>> Jacques
>>
>> Le 24/03/2024 à 15:54,lenny@flowlogix.com <ma...@flowlogix.com> a écrit :
>>> I am not quite sure that there enough information here to help…
>>> First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
>>>
>>> Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
>>>
>>>> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux<ja...@les7arts.com> <ma...@les7arts.com> wrote:
>>>>
>>>> Hi,
>>>>
>>>> We (the Apache OFBiz project) use Shiro mostly for ciphering.
>>>> We use Gradle and refer to Maven for dependencies.
>>>>
>>>> We recently upgraded from 1.13.0 to 2.0.0
>>>> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961>
>>>> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
>>>> It did not work (mostly AesCipherService creation compile errors).
>>>>
>>>> I then tried only shiro-crypto:2.0.0 and It worked.
>>>>
>>>> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
>>>> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>>>>
>>>> So I added them withhttps://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>>>>
>>>> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>>>>
>>>> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>>>>
>>>> Thanks in advance
>>>>
>>>> Jacques
>>>>
Re: Shiro and Maven
Posted by Jacques Le Roux <ja...@les7arts.com>.
It was that.
In Gradle I used
org.apache.shiro:shiro-crypto:2.0.0
instead of
org.apache.shiro:shiro-crypto-cipher:2.0.0
I started from https://mvnrepository.com/artifact/org.apache.shiro using core then switched to crypto, forgoting cipher.
I don't work how that worked in a situation (w/ OFBiz plugins) and not another (w/o OFBiz plugins).
As you suggested (pulling in the old version somewhere unexpectedly) maybe the reason.
Though I tried with Gradle --no-cache-build. Anyway who cares now ;)
Remains an issue with HashRequest. I'll have a look at https://github.com/apache/shiro/issues/1022
And https://www.google.fr/search?q=%22shiro+2.0.0%22+Hash&ie=UTF-8 globally
It's time for us to envisage argon or such...
Thanks again
Jacques
Le 24/03/2024 à 17:35, lenny@flowlogix.com a écrit :
> Make sure to look at the dependency tree, I bet you are pulling in the old version somewhere unexpectedly.
>
>> On Mar 24, 2024, at 11:32 AM, Jacques Le Roux<ja...@les7arts.com> wrote:
>>
>> Thanks Lenny,
>>
>> Oops, indeed it should be 2.0.0 everywhere. Else nothing would work ;)
>>
>> I did not want to repeat all what's in links, that why I just put links.
>>
>> Anyway, I'll have a look at Crypto classes’ package names, easier than anything else.
>> I'm though surprised that it works with current names when we have the 3 org.apereo.cas packages in the classpath.
>>
>> Maybe we miss something else...
>>
>> Jacques
>>
>> Le 24/03/2024 à 15:54,lenny@flowlogix.com <ma...@flowlogix.com> a écrit :
>>> I am not quite sure that there enough information here to help…
>>> First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
>>>
>>> Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
>>>
>>>> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux<ja...@les7arts.com> <ma...@les7arts.com> wrote:
>>>>
>>>> Hi,
>>>>
>>>> We (the Apache OFBiz project) use Shiro mostly for ciphering.
>>>> We use Gradle and refer to Maven for dependencies.
>>>>
>>>> We recently upgraded from 1.13.0 to 2.0.0
>>>> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961>
>>>> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
>>>> It did not work (mostly AesCipherService creation compile errors).
>>>>
>>>> I then tried only shiro-crypto:2.0.0 and It worked.
>>>>
>>>> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
>>>> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>>>>
>>>> So I added them withhttps://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>>>>
>>>> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>>>>
>>>> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>>>>
>>>> Thanks in advance
>>>>
>>>> Jacques
>>>>
Re: Shiro and Maven
Posted by le...@flowlogix.com.
Make sure to look at the dependency tree, I bet you are pulling in the old version somewhere unexpectedly.
> On Mar 24, 2024, at 11:32 AM, Jacques Le Roux <ja...@les7arts.com> wrote:
>
> Thanks Lenny,
>
> Oops, indeed it should be 2.0.0 everywhere. Else nothing would work ;)
>
> I did not want to repeat all what's in links, that why I just put links.
>
> Anyway, I'll have a look at Crypto classes’ package names, easier than anything else.
> I'm though surprised that it works with current names when we have the 3 org.apereo.cas packages in the classpath.
>
> Maybe we miss something else...
>
> Jacques
>
> Le 24/03/2024 à 15:54, lenny@flowlogix.com <ma...@flowlogix.com> a écrit :
>> I am not quite sure that there enough information here to help…
>> First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
>>
>> Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
>>
>>> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux <ja...@les7arts.com> <ma...@les7arts.com> wrote:
>>>
>>> Hi,
>>>
>>> We (the Apache OFBiz project) use Shiro mostly for ciphering.
>>> We use Gradle and refer to Maven for dependencies.
>>>
>>> We recently upgraded from 1.13.0 to 2.0.0
>>> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961>
>>> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
>>> It did not work (mostly AesCipherService creation compile errors).
>>>
>>> I then tried only shiro-crypto:2.0.0 and It worked.
>>>
>>> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
>>> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>>>
>>> So I added them with https://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>>>
>>> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>>>
>>> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>>>
>>> Thanks in advance
>>>
>>> Jacques
>>>
Re: Shiro and Maven
Posted by le...@flowlogix.com.
Make sure to look at the dependency tree, I bet you are pulling in the old version somewhere unexpectedly.
> On Mar 24, 2024, at 11:32 AM, Jacques Le Roux <ja...@les7arts.com> wrote:
>
> Thanks Lenny,
>
> Oops, indeed it should be 2.0.0 everywhere. Else nothing would work ;)
>
> I did not want to repeat all what's in links, that why I just put links.
>
> Anyway, I'll have a look at Crypto classes’ package names, easier than anything else.
> I'm though surprised that it works with current names when we have the 3 org.apereo.cas packages in the classpath.
>
> Maybe we miss something else...
>
> Jacques
>
> Le 24/03/2024 à 15:54, lenny@flowlogix.com <ma...@flowlogix.com> a écrit :
>> I am not quite sure that there enough information here to help…
>> First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
>>
>> Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
>>
>>> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux <ja...@les7arts.com> <ma...@les7arts.com> wrote:
>>>
>>> Hi,
>>>
>>> We (the Apache OFBiz project) use Shiro mostly for ciphering.
>>> We use Gradle and refer to Maven for dependencies.
>>>
>>> We recently upgraded from 1.13.0 to 2.0.0
>>> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961> <https://issues.apache.org/jira/browse/OFBIZ-12961>
>>> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
>>> It did not work (mostly AesCipherService creation compile errors).
>>>
>>> I then tried only shiro-crypto:2.0.0 and It worked.
>>>
>>> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
>>> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz> <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>>>
>>> So I added them with https://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400> <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>>>
>>> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>>>
>>> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>>>
>>> Thanks in advance
>>>
>>> Jacques
>>>
Re: Shiro and Maven
Posted by Jacques Le Roux <ja...@les7arts.com>.
Thanks Lenny,
Oops, indeed it should be 2.0.0 everywhere. Else nothing would work ;)
I did not want to repeat all what's in links, that why I just put links.
Anyway, I'll have a look at Crypto classes’ package names, easier than anything else. I'm though surprised that it works with current names when we
have the 3 org.apereo.cas packages in the classpath.
Maybe we miss something else...
Jacques
Le 24/03/2024 à 15:54, lenny@flowlogix.com a écrit :
> I am not quite sure that there enough information here to help…
> First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
>
> Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
>
>> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux<ja...@les7arts.com> wrote:
>>
>> Hi,
>>
>> We (the Apache OFBiz project) use Shiro mostly for ciphering.
>> We use Gradle and refer to Maven for dependencies.
>>
>> We recently upgraded from 1.13.0 to 2.0.0
>> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961>
>> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
>> It did not work (mostly AesCipherService creation compile errors).
>>
>> I then tried only shiro-crypto:2.0.0 and It worked.
>>
>> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
>> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>>
>> So I added them withhttps://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>>
>> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>>
>> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>>
>> Thanks in advance
>>
>> Jacques
>>
Re: Shiro and Maven
Posted by Jacques Le Roux <ja...@les7arts.com>.
Thanks Lenny,
Oops, indeed it should be 2.0.0 everywhere. Else nothing would work ;)
I did not want to repeat all what's in links, that why I just put links.
Anyway, I'll have a look at Crypto classes’ package names, easier than anything else. I'm though surprised that it works with current names when we
have the 3 org.apereo.cas packages in the classpath.
Maybe we miss something else...
Jacques
Le 24/03/2024 à 15:54, lenny@flowlogix.com a écrit :
> I am not quite sure that there enough information here to help…
> First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
>
> Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
>
>> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux<ja...@les7arts.com> wrote:
>>
>> Hi,
>>
>> We (the Apache OFBiz project) use Shiro mostly for ciphering.
>> We use Gradle and refer to Maven for dependencies.
>>
>> We recently upgraded from 1.13.0 to 2.0.0
>> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961>
>> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
>> It did not work (mostly AesCipherService creation compile errors).
>>
>> I then tried only shiro-crypto:2.0.0 and It worked.
>>
>> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
>> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>>
>> So I added them withhttps://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>>
>> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>>
>> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>>
>> Thanks in advance
>>
>> Jacques
>>
Re: Shiro and Maven
Posted by le...@flowlogix.com.
I am not quite sure that there enough information here to help…
First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux <ja...@les7arts.com> wrote:
>
> Hi,
>
> We (the Apache OFBiz project) use Shiro mostly for ciphering.
> We use Gradle and refer to Maven for dependencies.
>
> We recently upgraded from 1.13.0 to 2.0.0
> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961>
> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
> It did not work (mostly AesCipherService creation compile errors).
>
> I then tried only shiro-crypto:2.0.0 and It worked.
>
> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>
> So I added them with https://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>
> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>
> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>
> Thanks in advance
>
> Jacques
>
Re: Shiro and Maven
Posted by le...@flowlogix.com.
I am not quite sure that there enough information here to help…
First, you mention shiro-core 2.2.0 (vs. 2.0.0) are you sure you have the correct version?
Crypto classes’ package names have changed. All you would need to do is change Java source to reflect this.
> On Mar 24, 2024, at 3:51 AM, Jacques Le Roux <ja...@les7arts.com> wrote:
>
> Hi,
>
> We (the Apache OFBiz project) use Shiro mostly for ciphering.
> We use Gradle and refer to Maven for dependencies.
>
> We recently upgraded from 1.13.0 to 2.0.0
> https://issues.apache.org/jira/browse/OFBIZ-12961 <https://issues.apache.org/jira/browse/OFBIZ-12961>
> As we we had only this dependency, I started by replacing shiro-core:1.13.0 by shiro-core:2.2.0
> It did not work (mostly AesCipherService creation compile errors).
>
> I then tried only shiro-crypto:2.0.0 and It worked.
>
> Then (thanks to our CI) we discovered that there was other dependencies related to org.apereo.cas:cas-server
> https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz <https://lists.apache.org/thread/cszft6134oon9tx0xy0wn3hgvh4ogbpz>
>
> So I added them with https://github.com/apache/ofbiz-framework/commit/61f5831400 <https://github.com/apache/ofbiz-framework/commit/61f5831400>
>
> This morning I removed them and tried to add shiro-core:2.2.0, to no avail.
>
> If it's possible, could you please give us more information to get read of the org.apereo.cas:cas-server dependencies?
>
> Thanks in advance
>
> Jacques
>