[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
|
[jakarta.ee-community] removal of java.security.Identity in JDK 12
|
The java.security.Identity class has been deprecated since J2SE 1.2.
The EJBContext class uses java.security.Identity in the getCallerIdentity
method, which has been deprecated almost as long, and is replaced by
the getCallerPrincipal method.
The JDK team proposes removing the java.security.Identity class in JDK 12.
A consequence of this is that it would *not be possible* for any
*Java EE compatible product* to *support JDK 12 or later*.
(Note that this is not a *technical* issue, but rather a violation of
the Java EE compatibility requirements and the CTS.)
Presumably the EJBContext class would be updated for Jakarta EE 9 to
remove the getCallerIdentity method, thus solving this problem for
products that support Jakarta EE 9 or later.
If this is a concern for you, please send feedback to
security-dev@xxxxxxxxxxxxxxxx, or contact sean.mullan@xxxxxxxxxx
directly.
Thank you.
