rewrite-java-security icon indicating copy to clipboard operation
rewrite-java-security copied to clipboard

Unable to find runtime dependencies beginning with: 'jakarta.servlet-api', 'spring-security-config'

Open timtebeek opened this issue 1 year ago • 0 comments
trafficstars

Spotted while running Remediate vulnerabilities from the OWASP Top Ten https://app.moderne.io/results/UcdFWND6j

java.util.concurrent.ExecutionException: java.lang.IllegalStateException: Unable to construct Java17Parser.
  java.base/java.util.concurrent.FutureTask.report(FutureTask.java:122)
  java.base/java.util.concurrent.FutureTask.get(FutureTask.java:205)
Caused by java.lang.IllegalStateException: Unable to construct Java17Parser.
  org.openrewrite.java.Java17Parser$Builder.build(Java17Parser.java:96)
  org.openrewrite.java.Java17Parser$Builder.build(Java17Parser.java:63)
  org.openrewrite.java.security.spring.GenerateWebSecurityConfigurerAdapter.generate(GenerateWebSecurityConfigurerAdapter.java:75)
  org.openrewrite.java.security.spring.CsrfProtection.generate(CsrfProtection.java:103)
  org.openrewrite.java.security.spring.CsrfProtection.generate(CsrfProtection.java:31)
  org.openrewrite.ScanningRecipe.generate(ScanningRecipe.java:63)
  org.openrewrite.scheduling.RecipeRunCycle.lambda$generateSources$4(RecipeRunCycle.java:113)
  org.openrewrite.scheduling.RecipeStack.reduce(RecipeStack.java:57)
  ...
Caused by java.lang.IllegalArgumentException: Unable to find runtime dependencies beginning with: 'jakarta.servlet-api', 'spring-security-config', classpath: [... lots of jars, but none of them jakarta.servket-api ...]
  org.openrewrite.java.JavaParser.dependenciesFromClasspath(JavaParser.java:111)
  org.openrewrite.java.JavaParser$Builder.resolvedClasspath(JavaParser.java:397)
  org.openrewrite.java.Java17Parser$Builder.build(Java17Parser.java:92)
  org.openrewrite.java.Java17Parser$Builder.build(Java17Parser.java:63)
  org.openrewrite.java.security.spring.GenerateWebSecurityConfigurerAdapter.generate(GenerateWebSecurityConfigurerAdapter.java:75)
  org.openrewrite.java.security.spring.CsrfProtection.generate(CsrfProtection.java:103)
  org.openrewrite.java.security.spring.CsrfProtection.generate(CsrfProtection.java:31)
  org.openrewrite.ScanningRecipe.generate(ScanningRecipe.java:63)
  ...

timtebeek avatar Feb 27 '24 19:02 timtebeek