Hello, Francois Papon
Considering your suggestion to check Shiro 2. As I’ve said we need only jpms,
jakarta namespace, web and jaxrs. If these are supported, then I think we will
make it work. The problem is that our security layer is rather complex, so it
can require much work to move to Shiro 2.
This week we finally move to Spring 6 and jakarta namespace. Again the problem
is in Shiro. Nobody knows when stable Shiro 2 will be released. On the other
side we can’t provide our code to production with snapshots. So it is VERY
risky — to move to another version without knowing WHEN it will be released and
if it will EVER be released.
I know that Shiro is free and open source software and I didn’t write a line of
code for it. So, who am I? But it seems to be that there are some project
management problems with Shiro 2. Maybe it is better to release a little
simplified but stable variant of Shiro 2?
--
Best regards, Alex Orlov
