You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@druid.apache.org by "pagrawal10 (via GitHub)" <gi...@apache.org> on 2024/09/02 09:15:57 UTC
[PR] Revert "[CVE Fixes] Update version of Nimbus.jose.jwt" (druid)
pagrawal10 opened a new pull request, #16986:
URL: https://github.com/apache/druid/pull/16986
Reverts apache/druid#16320
Updating nimbus to version 9+ is causing `HTTP ERROR 500 java.lang.NoSuchMethodError: 'net.minidev.json.JSONObject com.nimbusds.jwt.JWTClaimsSet.toJSONObject()'`
Refer to https://github.com/SAP/cloud-security-services-integration-library/issues/429#issuecomment-1501601312 for more details.
We would need to upgrade other libraries as well for updating nimbus.jose.jwt
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
Re: [PR] Revert "[CVE Fixes] Update version of Nimbus.jose.jwt" (druid)
Posted by "abhishekagarwal87 (via GitHub)" <gi...@apache.org>.
abhishekagarwal87 merged PR #16986:
URL: https://github.com/apache/druid/pull/16986
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
Re: [PR] Revert "[CVE Fixes] Update version of Nimbus.jose.jwt" (druid)
Posted by "cryptoe (via GitHub)" <gi...@apache.org>.
cryptoe commented on PR #16986:
URL: https://github.com/apache/druid/pull/16986#issuecomment-2326348976
@pagrawal10 Whats other libraries need to get bumped up ?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
Re: [PR] Revert "[CVE Fixes] Update version of Nimbus.jose.jwt" (druid)
Posted by "pagrawal10 (via GitHub)" <gi...@apache.org>.
pagrawal10 commented on PR #16986:
URL: https://github.com/apache/druid/pull/16986#issuecomment-2326488991
We need to bump up druid-pac4j as well. I have created a PR for the same: https://github.com/apache/druid/pull/16567
We would need to add it as a different extension as that would not be compatible with JDK8.
pac4j versions > 5 are compatible with only JDK 11 and above
import needed is also different for pac4j v4.5.7 and pac4j v5.7.3 :
`import org.pac4j.jee.context.JEEContext;`
vs
`import org.pac4j.core.context.JEEContext;`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org