Re: Proposal: EOL for Shiro major versions

2024-07-12 Thread Francois Papon
Hi, +1 for the EOL timeline, just be careful about the Shiro 2.x because if Shiro 3.x will be based on java 21, people will need to move forward and at the end of 2025 there will be another current LTS. On Shiro 3.x I think it could be nice to merge some modules into the core module, like

Re: 2024 June Board Report Draft

2024-06-13 Thread Francois Papon
LGTM Thanks Brian! On 13/06/2024 16:49, Brian Demers wrote: The 2024 June ASF board report was due yesterday. I've created an initial draft here: https://svn.apache.org/repos/asf/shiro/board/2024-06.txt Comments, suggestions, additions, and feedback are welcome. Otherwise, it will be

Re: Shiro 2.0.1 release

2024-04-30 Thread Francois Papon
I can see only the jakarta dependencies and version stuff for OSGi related to this discussion: https://github.com/apache/shiro/issues/1324 I will try to take a look today but I'm afraid that the best will be to move all to jakarta in the source code and dependencies, or to have a new

Re: Shiro 2.0.1 release

2024-04-29 Thread Francois Papon
big +1 for launch the 2.0.1 release! On 28/04/2024 20:39, le...@flowlogix.com wrote: Hi, Looks like we are starting go get multiple issues submitted that are already slated to be fixed in 2.0.1 I am thinking to release 2.0.1 sooner rather than later. However, there are a few outstanding

Re: 2024 March Board Report Draft

2024-03-13 Thread Francois Papon
+1 Thanks Brian for the report! regards, François On 13/03/2024 02:30, Brian Demers wrote: The 2024 March ASF board report is due tomorrow. I've created an initial draft here: https://svn.apache.org/repos/asf/shiro/board/2024-03.txt Of note, the GitHub reporter statistics were not

[DISCUSS] Jakarta

2024-03-11 Thread Francois Papon
Hi, As we released the Shiro 2.0.0 major version, we have more and more users that are trying to migrate and have some jakarta issues. I think it would be nice if we create a new version 2.1.x or 3.x with no jakarta classifiers and having jakarta import package in the source code.

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-4

2023-11-07 Thread Francois Papon
+1 (binding) regards, François On 07/11/2023 23:55, le...@flowlogix.com wrote: This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-4 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1057

Re: [VOTE] Apache Shiro 1.13.0 release (#2)

2023-11-03 Thread Francois Papon
+1 (binding) On 31/10/2023 10:13, fpapon wrote: Hi everyone, I submit Apache Shiro 1.13.0 release to your vote. Release Notes: https://github.com/apache/shiro/releases/tag/shiro-root-1.13.0 Staging Maven repository: https://repository.apache.org/content/repositories/orgapacheshiro-1056

Re: Jenkins vs GitHub Actions

2023-10-29 Thread Francois Papon
Hi Tamás, Good question, I will as to infra because they can manage credentials into Github and I know that there is some other projects that has already moved to Github action. regards, On 29/10/2023 12:09, Tamás Cservenák wrote: AFAIK, ASF Infra does not allow "sharing" credentials

Re: [VOTE] Apache Shiro 1.13.0 release

2023-10-29 Thread Francois Papon
Hi, May be this is but it was "draft", I published it so it should be available now, but I don't know if people new to be login into Github. regards, On 29/10/2023 11:56, Tamás Cservenák wrote: Release notes are 404 :( T On Sun, Oct 29, 2023, 11:47 fpapon wrote: Hi everyone, I submit

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-3 (take 2)

2023-07-26 Thread Francois Papon
+1 (binding) Thanks Lenny! regards, François On 25/07/2023 23:28, le...@flowlogix.com wrote: This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-3 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1053

Re: [VOTE] Release Apache Shiro 2.0.0-alpha-2

2023-05-09 Thread Francois Papon
+1 (binding) regards, François On 04/05/2023 23:12, le...@flowlogix.com wrote: This is a call to vote in favor of releasing Apache Shiro version 2.0.0-alpha-2 Maven Staging repo: https://repository.apache.org/content/repositories/orgapacheshiro-1049

Re: [Discuss] Move Shiro from JIRA to GitHub Issues

2023-04-26 Thread Francois Papon
Hi Brian, Thanks for sharing that! I think we could start by making JIRA read-only start fresh in GH, it would be the less effort way for us. regards, François I don't think we need something as complex as this, but some linked threads make good points about only needing to search one

Re: [Discuss] Move Shiro from JIRA to GitHub Issues

2023-04-02 Thread Francois Papon
make sense, +1 from my side :) regards, François On 31/03/2023 15:40, Brian Demers wrote: We received a suggestion from the last board report to consider switching from JIRA to GitHub issues. The ASF JIRA instance no longer allows users to self-sign-up (though it DOES allow us to invite

Re: [VOTE] Release Apache Shiro 1.11.0

2023-01-09 Thread Francois Papon
+1 (binding) regards, François On 08/01/2023 03:27, Brian Demers wrote: This is a call to vote in favor of releasing Apache Shiro version 1.11.0. NOTE: This is the second attempt at this release, additional fixes for SHIRO-889 have been added since the previous attempt. We solved 2 Issues:

Re: [VOTE] Release Apache Shiro 1.11.0

2023-01-03 Thread Francois Papon
+1 (binding) Thanks Brian! regards, François On 04/01/2023 01:54, Brian Demers wrote: This is a call to vote in favor of releasing Apache Shiro version 1.11.0. We solved 2 Issues:

Re: Proposal: Release Shiro 2.0-alpha-1 to maven central

2022-12-09 Thread Francois Papon
+1 On 09/12/2022 16:55, Brian Demers wrote: +1 On Fri, Dec 9, 2022 at 6:21 AM Benjamin Marwell wrote: +1 On Thu, 8 Dec 2022, 22:22 , wrote: This will enable people to at least try to use modern Jakarta and JPMS without enabling snapshots and adding Apache snapshot repo

Re: Interested in testing the Jakarta artifacts

2022-10-13 Thread Francois Papon
Hi Julian, Not yet but I can push a snapshot. Let me push a PR. regards, Francois On 13/10/2022 15:59, Julian Fernandez wrote: Hi Shiro devs, I’m interested in testing out the Jakarta artifacts. Are there snapshot builds I can get through maven? Thank you, Julian

Re: 2022 September Board Report Draft

2022-09-14 Thread Francois Papon
Thanks! All is good :) Regards, François On 14/09/2022 17:15, Brian Demers wrote: Good points! I added: - Work is underway to support jakarta packages - Planning around Shiro v2 is still being discussed (I updated the SVN version too) On Wed, Sep 14, 2022 at 3:50 AM Francois Papon

Re: 2022 September Board Report Draft

2022-09-14 Thread Francois Papon
Hi Brian, Thank you for the report! I think we can add the work around jakarta and also that we are thinking about the roadmap for the 2.0.0. I don't know if it make sense but we could add that many of security report by user are based on a bad spring module integration/documentation.

Re: Announcement about jakarta classifiers

2022-06-24 Thread Francois Papon
good idea, +1 On 23/06/2022 20:43, Brian Demers wrote: +1 On Thu, Jun 23, 2022 at 2:40 PM Benjamin Marwell wrote: Hi everyone, I'd suggest we create a blog post on shiro.apache.org that we might provide a shaded version of Shiro with the "jakarta" classifier soon. It seems to draw

Re: 2022 June Board Report Draft

2022-06-12 Thread Francois Papon
LGTM! Thanks Brian! regards, François On 08/06/2022 19:04, Brian Demers wrote: The 2022 June ASF board report is due today. I've created an initial draft here: https://svn.apache.org/repos/asf/shiro/board/2022-06.txt Comments, suggestions, and feedback are welcome. Otherwise, it will be

[ANNOUNCE] Apache Shiro 1.9.0 released

2022-03-28 Thread Francois Papon
The Shiro team is pleased to announce the release of Apache Shiro version 1.9.0. Apache Shiro is an application security framework that provides application developers very clean and simple ways of supporting four cornerstones of security in their applications: authentication, authorization,

[RESULT][VOTE] Release Apache Shiro 1.9.0 - Take #3

2022-03-21 Thread Francois Papon
Hi, This vote passed with the following result: +1 (binding): Benjamin Marwell, Jean-Baptiste Onofré, Brian Demers, François Papon I'll finalize the release process and send the announcements soon. Thanks all for your vote! François On 16/03/2022 13:55, Francois Papon wrote

Re: [VOTE] Release Apache Shiro 1.9.0 - Take #3

2022-03-19 Thread Francois Papon
+1 (binding) regards, François On 16/03/2022 13:55, Francois Papon wrote: This is a call to vote in favor of releasing Apache Shiro version 1.9.0. We solved 20 issues for 1.9.0: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950=12350639 Bug     [SHIRO-829

[VOTE] Release Apache Shiro 1.9.0 - Take #3

2022-03-16 Thread Francois Papon
This is a call to vote in favor of releasing Apache Shiro version 1.9.0. We solved 20 issues for 1.9.0: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950=12350639 Bug     [SHIRO-829] - beanPostProcessor and FactoryBean cause aop to fail in the same Configuration   

[CANCEL][VOTE] Release Apache Shiro 1.9.0 - Take #2

2022-03-16 Thread Francois Papon
I forgot to update the subject of the mail. On 15/03/2022 16:51, Francois Papon wrote: Hi, As requested, I cancel this vote to fix the notice and the release note. We will prepare a new release including: 1. Update NOTICE 2. Update release note in the source Regards, François

Re: [VOTE] Release Apache Shiro 1.9.0 - Take #2

2022-03-15 Thread Francois Papon
Hi, As requested, I cancel this vote to fix the notice and the release note. We will prepare a new release including: 1. Update NOTICE 2. Update release note in the source Regards, François On 08/03/2022 22:47, Francois Papon wrote: This is a call to vote in favor of releasing Apache Shiro

Re: [VOTE] Release Apache Shiro 1.9.0 - Take #2

2022-03-11 Thread Francois Papon
> > Thanks again ! > > Regards > JB > > On Wed, Mar 9, 2022 at 9:40 AM Francois Papon > wrote: > > > Hi, > > > > The sources has been pushed to dist dev: > > > > https://dist.apache.org/repos/dis

Re: 2022 March Board Report Draft

2022-03-09 Thread Francois Papon
Hi Brian, It seems like the file is empty. regards, François On 08/03/2022 23:05, Brian Demers wrote: The 2022 March ASF board report is due tomorrow. I've created an initial draft here: https://svn.apache.org/repos/asf/shiro/board/2022-03.txt Comments, suggestions, and feedback are

Re: [VOTE] Release Apache Shiro 1.9.0 - Take #2

2022-03-09 Thread Francois Papon
Hi, The sources has been pushed to dist dev: https://dist.apache.org/repos/dist/dev/shiro/1.9.0/ I will update the release process wiki page. regards, François On 09/03/2022 09:16, Francois Papon wrote: Hi JB, We never pushed sources to the dev dist and it may be a missing step

Re: [VOTE] Release Apache Shiro 1.9.0 - Take #2

2022-03-09 Thread Francois Papon
please upload source artifact to dist ? Thanks Regards JB Le mar. 8 mars 2022 à 22:47, Francois Papon a écrit : This is a call to vote in favor of releasing Apache Shiro version 1.9.0. We solved 20 issues for 1.9.0: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950

[VOTE] Release Apache Shiro 1.9.0 - Take #2

2022-03-08 Thread Francois Papon
This is a call to vote in favor of releasing Apache Shiro version 1.9.0. We solved 20 issues for 1.9.0: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950=12350639 Bug     [SHIRO-829] - beanPostProcessor and FactoryBean cause aop to fail in the same Configuration   

[CANCEL][VOTE] Release Apache Shiro 1.9.0

2022-03-02 Thread Francois Papon
Hi, As Benjamin said for the hash problem, we need to cancel this vote. We will prepare a new release including: 1. Update to a later Apache parent pom 2. Add sha256 in the configuration Regards, François On 02/03/2022 09:17, Francois Papon wrote: This is a call to vote in favor

[VOTE] Release Apache Shiro 1.9.0

2022-03-02 Thread Francois Papon
This is a call to vote in favor of releasing Apache Shiro version 1.9.0. We solved 20 issues for 1.9.0: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950=12350639 Bug

Re: [VOTE] skip deployment of integration-test and samples artifacts

2022-02-14 Thread Francois Papon
+1 regards, François On 15/02/2022 08:01, Benjamin Marwell wrote: Hello Shiro devs and users! As discussed on the dev list, there seems to be a majority in favour of not deploying integration tests and samples anymore. The change is targeted to Shiro 2.0.0 and either Shiro 1.9.1 or 1.10.0.

Re: [DISCUSS] New Shiro Website ready to start

2022-01-26 Thread Francois Papon
Hi, Big +1! All looks good to me :) I think that we could missed some conversion (in the formatting) because there is a lot of content but most of them seems to be ok. regards, François On 21/01/2022 07:48, Benjamin Marwell wrote: Hi everyone! After we talked about technologies and

Re: [SITE] merging feature overview pages

2021-09-10 Thread Francois Papon
+1 to merge duplicated pages :) François fpa...@apache.org francois.pa...@openobject.fr Le 10/09/2021 à 11:20, Benjamin Marwell a écrit : > Same goes for: > > contribute.md > how-to-contribute.md > > Am Fr., 10. Sept. 2021 um 11:17 Uhr schrieb Benjamin Marwell > : >> Hi, >> >> we have two

Re: 2021 September Board Report Draft

2021-09-09 Thread Francois Papon
LGTM Thanks Brian! regards, François fpa...@apache.org francois.pa...@openobject.fr Le 09/09/2021 à 23:13, Brian Demers a écrit : > The 2021 September ASF board report is due tomorrow. I've created an > initial draft here: > > https://svn.apache.org/repos/asf/shiro/board/2021-09.txt > >

Re: [Discuss] Shiro-Site: replacement for scms

2021-08-31 Thread Francois Papon
t you know best." >> I would like to add IDE support to that equation :) >> freemwarker is a good choice imo (I personally know it a bit and it is >> run by the ASF and in active development), >> but others will also do. >> >> -- >> Ben >

Re: [Discuss] Shiro-Site: replacement for scms

2021-08-30 Thread Francois Papon
Hi, We definitively agree that we need a new site generator! If we want to stay in java community, so may be JBake is the best choice. I would like to propose yupiik minisite but as a new fresh project, the community is not big enough yet. so +1 for JBake. regards, François fpa...@apache.org

Re: [VOTE] Release Apache Shiro 1.8.0

2021-08-24 Thread Francois Papon
+1 (binding) Thanks Benjamin for the release! regards, François fpa...@apache.org Le 23/08/2021 à 21:16, Benjamin Marwell a écrit : > This is a call to vote in favor of releasing Apache Shiro version 1.8.0. > > We solved 3 issues for 1.8.0: > >

Re: [PROPOSAL] - Shiro 2 maven modules

2021-08-15 Thread Francois Papon
-config module into shiro-core Feel free to comment :) regards, François fpa...@apache.org Le 28/07/2021 à 14:46, Francois Papon a écrit : > Agree about the crypto module, may be it's better to keep it in its own > module because of the dependencies. > > regards, > > François &

[jira] [Created] (SHIRO-832) Move the shiro-lang module into shiro-core

2021-08-15 Thread Francois Papon (Jira)
Francois Papon created SHIRO-832: Summary: Move the shiro-lang module into shiro-core Key: SHIRO-832 URL: https://issues.apache.org/jira/browse/SHIRO-832 Project: Shiro Issue Type: New

[jira] [Created] (SHIRO-835) Move the shiro-config module into shiro-core

2021-08-15 Thread Francois Papon (Jira)
Francois Papon created SHIRO-835: Summary: Move the shiro-config module into shiro-core Key: SHIRO-835 URL: https://issues.apache.org/jira/browse/SHIRO-835 Project: Shiro Issue Type: New

[jira] [Created] (SHIRO-833) Move the shiro-event module into shiro-core

2021-08-15 Thread Francois Papon (Jira)
Francois Papon created SHIRO-833: Summary: Move the shiro-event module into shiro-core Key: SHIRO-833 URL: https://issues.apache.org/jira/browse/SHIRO-833 Project: Shiro Issue Type: New

[jira] [Created] (SHIRO-834) Move the shiro-cache module into shiro-core

2021-08-15 Thread Francois Papon (Jira)
Francois Papon created SHIRO-834: Summary: Move the shiro-cache module into shiro-core Key: SHIRO-834 URL: https://issues.apache.org/jira/browse/SHIRO-834 Project: Shiro Issue Type: New

[jira] [Created] (SHIRO-831) Update shiro-cache module to use the JSR 107 JCache

2021-08-15 Thread Francois Papon (Jira)
Francois Papon created SHIRO-831: Summary: Update shiro-cache module to use the JSR 107 JCache Key: SHIRO-831 URL: https://issues.apache.org/jira/browse/SHIRO-831 Project: Shiro Issue Type

[jira] [Commented] (SHIRO-829) beanPostProcessor and FactoryBean cause aop to fail in the same Configuration

2021-08-04 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-829?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17393070#comment-17393070 ] Francois Papon commented on SHIRO-829: -- I was talking about your local errors, are they the same

[jira] [Comment Edited] (SHIRO-829) beanPostProcessor and FactoryBean cause aop to fail in the same Configuration

2021-08-04 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-829?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17392952#comment-17392952 ] Francois Papon edited comment on SHIRO-829 at 8/4/21, 10:14 AM: Hi [~xcz

[jira] [Resolved] (SHIRO-805) Spelling

2021-08-04 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-805?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-805. -- Resolution: Resolved > Spelling > > > Ke

[jira] [Commented] (SHIRO-829) beanPostProcessor and FactoryBean cause aop to fail in the same Configuration

2021-08-04 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-829?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17392952#comment-17392952 ] Francois Papon commented on SHIRO-829: -- Hi [~xcz] , it's better to propose your PR on master and we

[jira] [Updated] (SHIRO-805) Spelling

2021-08-04 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-805?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-805: - Issue Type: Task (was: Bug) > Spelling > > > Ke

[jira] [Updated] (SHIRO-805) Spelling

2021-08-04 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-805?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-805: - Fix Version/s: 2.0.0 > Spelling > > > Ke

[jira] [Updated] (SHIRO-829) beanPostProcessor and FactoryBean cause aop to fail in the same Configuration

2021-08-04 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-829?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-829: - Fix Version/s: 1.8.0 2.0.0 1.7.2 > beanPostProces

[jira] [Commented] (SHIRO-829) LifecycleBeanPostProcessor和ShiroFilterFactoryBean在同一个Configuration中导致aop失效

2021-08-03 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-829?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17392274#comment-17392274 ] Francois Papon commented on SHIRO-829: -- Thanks, we will take a look. > LifecycleBeanPostProcess

Re: [SHIRO-206] JSF support

2021-08-02 Thread Francois Papon
+1 to remove. regards, François fpa...@apache.org Le 01/08/2021 à 22:00, Benjamin Marwell a écrit : > Hi everyone, > > we had a discussion in slack, that later versions of shiro might want > to concentrate on CDI-ish/jndi based usages. Not that this would be a > target for 2.0, but SHIRO-206

Re: [PROPOSAL] - Shiro 2 maven modules

2021-07-28 Thread Francois Papon
Agree about the crypto module, may be it's better to keep it in its own module because of the dependencies. regards, François fpa...@apache.org Le 28/07/2021 à 12:49, Benjamin Marwell a écrit : > General +1 if dependencies allow it. > > Not so sure about the crypto modules, though. Because of

[jira] [Commented] (SHIRO-826) HTTP 400 with encoded umlauts in URL

2021-07-19 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-826?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17383525#comment-17383525 ] Francois Papon commented on SHIRO-826: -- Hi [~sgessner] , any chance to share your pom dependencies

[jira] [Updated] (SHIRO-825) Trailing slash in URI results in "IllegalArgumentException: There is no configured chain under the name/key"

2021-07-09 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-825?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-825: - Fix Version/s: 1.8.0 2.0.0 > Trailing slash in URI resu

[jira] [Resolved] (SHIRO-349) Security: Byte arrays (and other memory) holding sensitive data (even temporarily) should be zerod-out

2021-07-09 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-349?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-349. -- Resolution: Resolved > Security: Byte arrays (and other memory) holding sensitive data (e

Re: [Discus] Move JIRA and GitHub notifications to new lists

2021-05-27 Thread Francois Papon
big +1 :) regards, François fpa...@apache.org Le 26/05/2021 à 23:54, Brian Demers a écrit : > Currently, both JIRA and Gitbox notifications are sent to the dev list > (current traffic): > https://mail-archives.apache.org/mod_mbox/shiro-dev/202105.mbox/browser > > I propose moving the

[jira] [Commented] (SHIRO-815) Null Pointer Exception during Shiro cleanup

2021-05-22 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17349929#comment-17349929 ] Francois Papon commented on SHIRO-815: -- This version is not in maintenance anymore, any chances

[jira] [Resolved] (SHIRO-804) Avoid conflicts with spring boot aop

2021-05-19 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-804?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-804. -- Resolution: Resolved > Avoid conflicts with spring boot

[jira] [Updated] (SHIRO-804) Avoid conflicts with spring boot aop

2021-05-19 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-804?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-804: - Fix Version/s: 2.0.0 > Avoid conflicts with spring boot

[jira] [Commented] (SHIRO-815) Null Pointer Exception during Shiro cleanup

2021-04-27 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=1731#comment-1731 ] Francois Papon commented on SHIRO-815: -- Wich version of Shiro are you using? > Null Poin

[jira] [Resolved] (SHIRO-812) Key value separator in config is broken with escape char

2021-04-15 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-812?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-812. -- Resolution: Resolved > Key value separator in config is broken with escape c

Re: Request for assistance to backport CVE-2020-13933 fix

2021-03-31 Thread Francois Papon
n update of shiro in unstable would only need to be concerned with the > activemq in unstable. However, an update to shiro in stable or old > stable would need to account for the older activemq versions there. > > Regards, > > -Roberto > > On Wed, Mar 31, 2021 at 09:48

Re: Request for assistance to backport CVE-2020-13933 fix

2021-03-31 Thread Francois Papon
Hi Roberto, Which version of activemq are you using in the debian package? regards, François fpa...@apache.org Le 31/03/2021 à 21:21, Roberto C. Sánchez a écrit : > Hi Brian, > > Thanks for your help. I am working to backport dc194fc977ab to address > CVE-2020-13933 and after that I will move

[jira] [Created] (SHIRO-812) Key value separator in config is broken with escape char

2021-03-12 Thread Francois Papon (Jira)
Francois Papon created SHIRO-812: Summary: Key value separator in config is broken with escape char Key: SHIRO-812 URL: https://issues.apache.org/jira/browse/SHIRO-812 Project: Shiro Issue

Re: [VOTE] Release Apache Shiro 1.7.1

2021-01-29 Thread Francois Papon
+1 (binding) regards, François fpa...@apache.org Le 27/01/2021 à 22:10, Benjamin Marwell a écrit : > This is a call to vote in favor of releasing Apache Shiro version 1.7.1. > > The 1 issue solved for 1.7.1: > > https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310950=12348679

[jira] [Commented] (SHIRO-808) security enhance

2021-01-11 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-808?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17262696#comment-17262696 ] Francois Papon commented on SHIRO-808: -- [~Palak-137] thanks for the invitation! > security enha

Re: [Question] Shiro2CryptFormat for KDF support: Argon2, scrypt, bcrypt

2021-01-07 Thread Francois Papon
recate or even remove the non-KDF formats? > > Am Di., 5. Jan. 2021 um 15:09 Uhr schrieb Francois Papon < > francois.pa...@openobject.fr>: > >> Hi Benjamin, >> >> I like the idea of a new Shiro2 CryptFormat with parameters. >> >> About the bcrypt or OpenBSD-B

Re: [Question] Shiro2CryptFormat for KDF support: Argon2, scrypt, bcrypt

2021-01-05 Thread Francois Papon
Hi Benjamin, I like the idea of a new Shiro2 CryptFormat with parameters. About the bcrypt or OpenBSD-Bcrypt-Base64, I think we can drop some old crypt format, so I'm agree to ditch them. regards, François fpa...@apache.org Le 04/01/2021 à 15:33, Benjamin Marwell a écrit : > Hi everyone! > >

[jira] [Commented] (SHIRO-781) Add JPMS support

2020-11-10 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-781?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17229380#comment-17229380 ] Francois Papon commented on SHIRO-781: -- I'm trying to simply add `Automatic-Module-Name

[jira] [Assigned] (SHIRO-781) Add JPMS support

2020-11-10 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-781?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon reassigned SHIRO-781: Assignee: Francois Papon > Add JPMS support > > >

[jira] [Updated] (SHIRO-798) Improvement in Shiro API

2020-11-09 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-798?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-798: - Fix Version/s: 2.0.0 > Improvement in Shiro

[jira] [Updated] (SHIRO-797) Shiro 1.7.0 is lower than using springboot version 2.0.7 dependency error

2020-11-08 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-797?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-797: - Fix Version/s: 1.7.1 2.0.0 > Shiro 1.7.0 is lower than using springb

Re: [VOTE] Release Apache Shiro 1.7.0 - take #2

2020-10-27 Thread Francois Papon
No problem ;) regards, François fpa...@apache.org Le 27/10/2020 à 14:30, jleleu a écrit : > Hi, > > Right, my name is not in the PMCs list, but in the committers list. > > I was promoted committer a few years ago. > > I didn't know there was a difference between PMC and committer votes. > >

Re: [VOTE] Release Apache Shiro 1.7.0 - take #2

2020-10-27 Thread Francois Papon
+1 (binding) François fpa...@apache.org Le 24/10/2020 à 09:52, fpa...@apache.org a écrit : > This is a call to vote in favor of releasing Apache Shiro version 1.7.0 > > The 7 issues solved for 1.7.0: > >

[jira] [Resolved] (SHIRO-740) SslFilter with HTTP Strict Transport Security (HSTS)

2020-10-20 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-740. -- Resolution: Resolved > SslFilter with HTTP Strict Transport Security (H

[jira] [Updated] (SHIRO-740) SslFilter with HTTP Strict Transport Security (HSTS)

2020-10-20 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-740: - Fix Version/s: 1.7.0 > SslFilter with HTTP Strict Transport Security (H

Re: [DISCUSS] Proposal for v2 API change in AuthorizingRealm.java

2020-09-11 Thread Francois Papon
Hi, +1 for an upgrade of the api! I made a PoC with JWT in Shiro last year and I was using the cache to store the authorization information from the JWT in the principal during the authentication phase: import io.jsonwebtoken.Claims; import io.jsonwebtoken.Jws; import io.jsonwebtoken.Jwts;

[jira] [Closed] (SHIRO-792) ShiroWebFilterConfiguration seems to conflict with other FilterRegistrationBean

2020-09-03 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-792?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon closed SHIRO-792. Assignee: Francois Papon (was: Les Hazlewood) Resolution: Resolved

[jira] [Updated] (SHIRO-792) ShiroWebFilterConfiguration seems to conflict with other FilterRegistrationBean

2020-08-27 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-792?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-792: - Fix Version/s: 1.6.1 > ShiroWebFilterConfiguration seems to conflict with ot

[jira] [Updated] (SHIRO-789) Also add cookie SameSite option to Spring

2020-08-26 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-789?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-789: - Fix Version/s: 1.6.1 2.0.0 > Also add cookie SameSite option to Spr

Re: Shiro site deployments may be delayed

2020-08-23 Thread Francois Papon
Yeah! Thanks Brian! regards, François fpa...@apache.org Le 22/08/2020 à 20:08, Les Hazlewood a écrit : > Nice! Good to hear that we're off of SVN entirely now ;) > > On Sat, Aug 22, 2020 at 1:48 PM Brian Demers wrote: > >> This has been completed! >> >> We have one outstanding issue related

[jira] [Resolved] (SHIRO-767) org.apache.shiro.util.ClassUtil cannot load the array of Primitive DataType when use undertown as web container

2020-08-20 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-767?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-767. -- Resolution: Fixed > org.apache.shiro.util.ClassUtil cannot load the array of Primitive DataT

[jira] [Resolved] (SHIRO-785) Upgrade to maven-bundle-plugin 5.1.1

2020-08-19 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-785?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-785. -- Resolution: Fixed > Upgrade to maven-bundle-plugin 5.

[jira] [Updated] (SHIRO-767) org.apache.shiro.util.ClassUtil cannot load the array of Primitive DataType when use undertown as web container

2020-08-19 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-767?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-767: - Fix Version/s: 1.6.1 2.0.0 > org.apache.shiro.util.ClassUtil cannot l

Re: [VOTE] Release Apache Shiro 1.6.0

2020-08-13 Thread Francois Papon
+1 (binding) regards, François fpa...@apache.org Le 11/08/2020 à 23:47, Brian Demers a écrit : > This is a call to vote in favor of releasing Apache Shiro version 1.6.0. > > The 5 issues solved for 1.6.0: > >

[jira] [Assigned] (SHIRO-740) SslFilter with HTTP Strict Transport Security (HSTS)

2020-08-06 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon reassigned SHIRO-740: Assignee: Francois Papon > SslFilter with HTTP Strict Transport Security (H

[jira] [Resolved] (SHIRO-780) NOTICE files of shiro components don't match NOTICE in source code repository

2020-08-06 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-780?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-780. -- Resolution: Resolved > NOTICE files of shiro components don't match NOTICE in source c

[jira] [Resolved] (SHIRO-786) Upgrade to Spring 5.2.8.RELEASE and Spring boot 2.3.2.RELEASE

2020-08-06 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-786?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-786. -- Resolution: Resolved > Upgrade to Spring 5.2.8.RELEASE and Spring boot 2.3.2.RELE

[jira] [Created] (SHIRO-786) Upgrade to Spring 5.2.8.RELEASE and Spring boot 2.3.2.RELEASE

2020-08-04 Thread Francois Papon (Jira)
Francois Papon created SHIRO-786: Summary: Upgrade to Spring 5.2.8.RELEASE and Spring boot 2.3.2.RELEASE Key: SHIRO-786 URL: https://issues.apache.org/jira/browse/SHIRO-786 Project: Shiro

[jira] [Created] (SHIRO-785) Upgrade to maven-bundle-plugin 5.1.1

2020-08-02 Thread Francois Papon (Jira)
Francois Papon created SHIRO-785: Summary: Upgrade to maven-bundle-plugin 5.1.1 Key: SHIRO-785 URL: https://issues.apache.org/jira/browse/SHIRO-785 Project: Shiro Issue Type: Dependency

[jira] [Resolved] (SHIRO-398) Inconsistent name for session validation interval property in different implementations

2020-07-26 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-398?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon resolved SHIRO-398. -- Resolution: Resolved > Inconsistent name for session validation interval property in differ

[jira] [Updated] (SHIRO-740) SslFilter with HTTP Strict Transport Security (HSTS)

2020-07-22 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-740: - Fix Version/s: 1.6.0 > SslFilter with HTTP Strict Transport Security (H

[jira] [Updated] (SHIRO-762) SecurityUtils.securityManager should be volatile

2020-07-22 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-762?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-762: - Fix Version/s: 1.6.0 > SecurityUtils.securityManager should be volat

[jira] [Updated] (SHIRO-766) ArrayIndexOutOfBoundsException in Base64#decode

2020-07-22 Thread Francois Papon (Jira)
[ https://issues.apache.org/jira/browse/SHIRO-766?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Francois Papon updated SHIRO-766: - Fix Version/s: 1.6.0 > ArrayIndexOutOfBoundsException in Base64#dec

  1   2   3   4   5   6   7   >