Skip to content

Conversation

@reta
Copy link
Member

@reta reta commented Dec 28, 2025

Remove org.apache.cxf.feature.LoggingFeature. It has been deprecated for a long time and should be removed, the replacement exists.

  • removed <logging> namespace handler in cxf-core (since logging feature is not part of core anymore): replacement is <bean class="org.apache.cxf.ext.logging.LoggingFeature"/> along with
     <dependency>
           <groupId>org.apache.cxf</groupId>
           <artifactId>cxf-rt-features-logging</artifactId>
           <version>4.2.0</version>
       </dependency>

@reta reta force-pushed the CXF-9116 branch 11 times, most recently from d1fe633 to a76b407 Compare December 29, 2025 14:05
@reta reta requested review from coheigea and ffang December 29, 2025 15:50
@reta
Copy link
Member Author

reta commented Dec 29, 2025

@coheigea @ffang would appreciate a look folks, getting rid of some long standing deprecations, thank you


SecurityContext httpSecurityContext = new SecurityContext() {
final HttpServletRequest reqFromInMessage = (HttpServletRequest)exchange.getInMessage().get(HTTP_REQUEST);
final SecurityContext httpSecurityContext = new SecurityContext() {
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ffang some refactoring here: a number of cxf-*-security tests were failing due to logging change: apparently when DefaultLogEventMapper is called, the underlying HTTP request is already recycled and fails with NPE (jetty/jetty.project#12080). To mitigate that, at least for getUserPrincipal() - capturing principal early.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant