Re: RFR: 8296244: Alternate implementation of user-based authorization Subject APIs that doesn’t depend on Security Manager APIs [v3]

Alan Bateman Alan.Bateman at oracle.com
Fri Mar 8 08:36:14 UTC 2024


On 08/03/2024 08:20, Peter Firmstone wrote:
> JDK-8267108 doesn't mention any existing getSubject/doAs methods will 
> be changed to throw UnsupportedOperationException, would be great if 
> that can be documented as well, if I hadn't seen the change in the 
> mailing list I would have missed it.   Just helps track related changes.

The warning at compile time that the API is deprecated for removal 
should help when compiling with recent JDK releases.

When JDK-8267108 introduced new/replacement APIs then the 
details/time-line for when the old/problematic APIs would be degraded 
was not known.

JDK 23 (or whatever release the current change goes into) will have 
documentation on the change in the release.

-Alan



More information about the security-dev mailing list