uaa icon indicating copy to clipboard operation
uaa copied to clipboard

Spring Security Oauth2 End of Life

Open strehle opened this issue 8 months ago • 5 comments

UAA uses https://github.com/spring-attic/spring-security-oauth This was no issues in the past but with the Spring Boot 3 update the library needs to be changed or removed

Similar issue in past https://github.com/cloudfoundry/uaa/issues/1728

Plan for Removal.

  • copy base classes (most needed) and exceptions into UAA
  • migrate other: https://github.com/spring-projects/spring-security/wiki/OAuth-2.0-Migration-Guide

strehle avatar Oct 19 '23 18:10 strehle

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/186294740

The labels on this github issue will be updated when the story is started.

cf-gitbot avatar Oct 19 '23 18:10 cf-gitbot

I did a similar migration this week on another project. The biggest helpful thing I did was to create classed LegacyClientDetails and LegacyBaseClientDetails to retain the JSON structure of clients as a data object.

fhanik avatar Jan 25 '24 20:01 fhanik

I did a similar migration this week on another project. The biggest helpful thing I did was to create classed LegacyClientDetails and LegacyBaseClientDetails to retain the JSON structure of clients as a data object.

@fhanik to me UAA is not legacy, so I will do this but called in UaaClientDetails :-) Similar things I will to with exceptions, means I will move/copy them into UAA context, because many of them are still in use there.

strehle avatar Feb 22 '24 16:02 strehle

@strehle - I also found this answer to support the majority of the lifting when creating the new RestTemplates

https://stackoverflow.com/a/60634690

fhanik avatar Feb 22 '24 18:02 fhanik

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/187414513

The labels on this github issue will be updated when the story is started.

cf-gitbot avatar Apr 11 '24 16:04 cf-gitbot