Return-Path: X-Original-To: apmail-shiro-dev-archive@www.apache.org Delivered-To: apmail-shiro-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 14C3019381 for ; Wed, 13 Apr 2016 14:41:10 +0000 (UTC) Received: (qmail 84524 invoked by uid 500); 13 Apr 2016 14:41:09 -0000 Delivered-To: apmail-shiro-dev-archive@shiro.apache.org Received: (qmail 84494 invoked by uid 500); 13 Apr 2016 14:41:09 -0000 Mailing-List: contact dev-help@shiro.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@shiro.apache.org Delivered-To: mailing list dev@shiro.apache.org Received: (qmail 84481 invoked by uid 99); 13 Apr 2016 14:41:09 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 13 Apr 2016 14:41:09 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 1535CC064A for ; Wed, 13 Apr 2016 14:41:09 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.448 X-Spam-Level: * X-Spam-Status: No, score=1.448 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=2, KAM_LOTSOFHASH=0.25, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd4-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx2-lw-us.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id VFdZ105de7M9 for ; Wed, 13 Apr 2016 14:41:06 +0000 (UTC) Received: from mail-qg0-f48.google.com (mail-qg0-f48.google.com [209.85.192.48]) by mx2-lw-us.apache.org (ASF Mail Server at mx2-lw-us.apache.org) with ESMTPS id DBC235F1E9 for ; Wed, 13 Apr 2016 14:41:05 +0000 (UTC) Received: by mail-qg0-f48.google.com with SMTP id f105so44994246qge.2 for ; Wed, 13 Apr 2016 07:41:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to; bh=GMM13RsjZGQeIJeRRROVYAdgEFL8q3k54jSHvIBviQ8=; b=0aEz14LXhk/0b+YNah4bYcEdOERKOwRYNzMidrU1fD4My0PgDHWd4LcluLR22Wuloh gxb+4xKtGvMILJwuDE6vu+/0SIDzdIIRbC46+ithS/TFKw+5o4MC+6rcMRPqUhf3YyzF Wo31q7slXCVgysw9D/2Pih0yWwcBhVsh9z+gRZhV1UKkNjMXbk1MgTnl+J7IL+Vu7DJb twvK1AxuIM3ItRn3TImgYiN2RiK9TYivCORZj2kdhKQIquBIWm+cUE/X3uzW+Co3JUPi N8iTkJ7riJ9hS6hj9z+hH1fjOB2BhbS9ERXrROWRY0qiy9JZx8g0Wgj6R+bgn0wf1KnJ 4nwQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to; bh=GMM13RsjZGQeIJeRRROVYAdgEFL8q3k54jSHvIBviQ8=; b=LD6g/HA0GVUmCMoCJZ52gjaEfnSf0GDxYZlA+sRF9vR2D2LFK3hIyZaG0T1ZpHoQTx vHDJQrGcgGgfAKwvEg7EpNQeGlxK8d85oKL/LWh3UzAtz2ektbF88LjB/zD6pl0IWdyh fMdnnYgY0Q4SG/J0yh42+GJMb/bcnqoqqDX2P0qU+p4dK69k3iBUrFeS/V9Nn2Gh+5HA 0e+EYI2Qc4P4ExK7FhU9ctN5JNJ0KXEQlGbugBSmdt+FlKDlhVHR2MdTU6EAkeVu92R6 V8gAxxtoOcrx6VqhbVBF2ZhsRb4Qpih8PHoy79eiOcGWwSltiz5IqgSSTkwLmu0iz5MK ywxQ== X-Gm-Message-State: AOPr4FUWbrsSWP/faIUYCM+wsVirJPXegJ+7XWJrF3BBfmarabHJz0NF0mEC+gV0gavbyM0IZsqrvXTo5ZFmmw== MIME-Version: 1.0 X-Received: by 10.140.151.204 with SMTP id 195mr12456210qhx.42.1460558465368; Wed, 13 Apr 2016 07:41:05 -0700 (PDT) Received: by 10.140.35.199 with HTTP; Wed, 13 Apr 2016 07:41:05 -0700 (PDT) In-Reply-To: References: <05C5B412-C4D1-4C09-B6B8-B3F4A58953FD@gmail.com> Date: Wed, 13 Apr 2016 10:41:05 -0400 Message-ID: Subject: Re: I would like to help OSGI'fy Shiro, if you will have me. From: Brian Demers To: dev@shiro.apache.org Content-Type: multipart/alternative; boundary=001a1137699e808a7705305ec40e --001a1137699e808a7705305ec40e Content-Type: text/plain; charset=UTF-8 I'll cherry-pick them in both On Wed, Apr 13, 2016 at 10:26 AM, Andreas Kohn wrote: > Brian, > > We needed[*] to get Shiro 1.2 building with JDK 8, these commits could be > helpful to pull into the main repository: > > > https://github.com/Collaborne/shiro/commit/e83d73f858bc48cbc7c7123fada099eff044aa43 > (SHIRO-516) > > > https://github.com/Collaborne/shiro/commit/631847d3a2754244ad0ab2f87bd581fe7b8e60f7 > > https://github.com/Collaborne/shiro/commit/831b90c9255ce81994accef5a94ddfa31a85d8cf > > https://github.com/Collaborne/shiro/commit/be75d27d9439585308ea48420a36d42b53fe7cb2 > (no issue/PR yet) > > Should I create a new issue for that, or would that only be relevant for > the mythical Shiro 2.x? > > Regards, > -- > Andreas > > [*] JDK 7 is EOL'd, so I simply didn't want to have to bother with that > anymore. > > On Sun, Apr 10, 2016 at 11:02 PM Brian Demers > wrote: > > > It should, though use JDK 1.7, if you are not already > > > > -Brian > > > > > On Apr 10, 2016, at 7:43 AM, Martin Nielsen wrote: > > > > > > Hi again. > > > > > > I have started ever so slowly, and i have run into the first issue: > > Compile > > > problems:D > > > > > > Either i am missing something, or i have hit the project at a time > where > > it > > > doesn't compile. The support/AspectJ project is failing to compile. > > > > > > Should the project just comple directly from the github repo? Or do i > > need > > > some special setup? > > > > > > If not, i guess i will just start spooling backwards until i hit a > commit > > > that compiles:D > > > > > >> On Thu, Apr 7, 2016 at 9:25 PM, Brian Demers > > wrote: > > >> > > >> Martin, > > >> Understood, go for it. > > >> > > >>> On Thu, Apr 7, 2016 at 10:32 AM, Martin Nielsen > > wrote: > > >>> > > >>> That is the problem, i don't think this will be a "small" change > > really. > > >> I > > >>> will be making small knicks in quite a few places. I am up for doing > > the > > >>> work, and i am up for modifying it and taking critique. I wouldn't > mind > > >>> helping to support it afterwards either. I just want to make sure i > > don't > > >>> get some answer like "OSGi is not a priority for us, please sod off" > :D > > >>> > > >>> On Thu, Apr 7, 2016 at 3:44 PM, Brian Demers > > > >>> wrote: > > >>> > > >>>> +1 ( including Dan's comments) > > >>>> > > >>>> GitHub pull requests are now preferred. > > >>>> > > >>>>> On Thu, Apr 7, 2016 at 9:07 AM, Dan Dumont > > wrote: > > >>>>> > > >>>>> I don't want to put words in the shiro committers mouths, but I'm > > >> sure > > >>>> they > > >>>>> would be happy to see the work. The best way I found to get > involved > > >>> in > > >>>>> Apache projects is to start making small, easy to review changes > that > > >>>> were > > >>>>> easy to explain. (With unit tests of course :) > > >>>>> > > >>>>> Eventually, the community extended a committer invite. > > >>>>> > > >>>>> Good luck! > > >>>>> I use shiro on karaf right now and would like to see some love for > > >> OSGi > > >>>> as > > >>>>> well. > > >>>>> > > >>>>> sent using my nexus 5x > > >>>>>> On Apr 7, 2016 7:29 AM, "Martin Nielsen" > wrote: > > >>>>>> > > >>>>>> Hello Shiro developers. > > >>>>>> > > >>>>>> I have recently been using Shiro for all my security needs, and I > > >>> adore > > >>>>> the > > >>>>>> framework. Recently though, I have been moving more and more > > >> towards > > >>>> OSGi > > >>>>>> specification, and it feels like Shiro is a little lacking in that > > >>>> area. > > >>>>> It > > >>>>>> works well enough but it is quite static, and does not really > > >> handle > > >>>> the > > >>>>>> dynamic nature of OSGi. > > >>>>>> > > >>>>>> As far as I can see, all the wiring in Shiro on OSGi is one at > > >>>>>> initialization time, and remains static while the application is > > >>>> running. > > >>>>>> > > >>>>>> I think I have a pretty low impact way to create an OSGi based > > >>>>>> SecurityManager that would register Realms, SubjectDAO's, > > >>>> SessionManagers > > >>>>>> et cetera as services, allowing bundles to register their own > > >>>>>> sessionmanagers, cachemanagers, and more importantly realms, when > > >>> they > > >>>>>> start up. > > >>>>>> > > >>>>>> The result would be an OSGi based SecurityManager that does not > > >> start > > >>>> up > > >>>>>> statically, for example with an INI file, but uses the OSGi > service > > >>>>>> registry to get its resources at runtime. > > >>>>>> > > >>>>>> The overall plan is to create a few changes in Shiro Core and > Shiro > > >>>> Web, > > >>>>> so > > >>>>>> it is possible to define how the individual parts connects to each > > >>>> other. > > >>>>>> So, basically i want to change hardwired references to small > > >> adapter > > >>>>>> classes, that can be injected to change how the components finds > > >> each > > >>>>>> other. The existing SecurityManagers should of cause remain > > >>> unaffected > > >>>>> and > > >>>>>> there should be no change to the end user experience. > > >>>>>> I will also create an adapter, that can be used in place of the > > >>> static > > >>>>>> securitymanager when running OSGi. > > >>>>>> > > >>>>>> When that is done, I will add a number of modules to serve as > > >>> dedicated > > >>>>>> OSGi bundles, using hopefully 95& of the code from Core and Web, > so > > >>> the > > >>>>>> standard components can be started as separate bundles, and > > >> replaced > > >>> by > > >>>>>> custom implementations if necessary. > > >>>>>> > > >>>>>> My hope is that, when done, it will be possible to use a > > >>>> securitymanager > > >>>>>> that doesn't wire anything at startup, and can change at runtime, > > >> as > > >>>>>> bundles are started and stopped. > > >>>>>> > > >>>>>> I am very willing to put in the hours to make this happen, but it > > >>> would > > >>>>> be > > >>>>>> nice to know that this is something that the maintainers actaully > > >>> want, > > >>>>> so > > >>>>>> I don't end up with something that isn't desired. I also have not > > >>>> worked > > >>>>>> that much with the Web bundle, so I might have some questions down > > >>> the > > >>>>>> line. > > >>>>>> > > >>>>>> So: Is this something that that you would consider a pull request > > >>> for? > > >>>> Of > > >>>>>> cause i can't guarantee that it will work, but i am willing to > try, > > >>>>>> provided that i get some assurance that it is actually something > > >> you > > >>>> want > > >>>>>> in the project. > > >>>>>> > > >>>>>> Please let me know > > >>>>>> > > >>>>>> Martin Nielsen > > >>>>>> -Hopeful Apache Committer > > >>>>>> > > >>>>> > > >>>> > > >>> > > >> > > > --001a1137699e808a7705305ec40e--