https://bz.apache.org/bugzilla/show_bug.cgi?id=64715
--- Comment #13 from Christopher Schultz <ch...@christopherschultz.net> --- (In reply to Robert Rodewald from comment #9) > Slightly off topic, but could someone explain why the package imports in > CallbackHandlerImpl switched from > > import javax.security.auth.callback.UnsupportedCallbackException; > import javax.security.auth.message.callback.CallerPrincipalCallback; > import javax.security.auth.message.callback.GroupPrincipalCallback; > > in Tomcat 9 to the corresponding jakarta.security.auth equivalents in Tomcat > 10? Is that a JASPIC 2.0 change? I don't know about the JASPIC version implications, but Java EE recently change to Jakarta EE an all the package names changed for their forthcoming versions. Presumably, this includes JASPIC because it's included in the Java EE specifications which have been "migrated" to the new Jakarta umbrella. [1] For all the affected APIs, Tomcat has basically done a search-and-replace for javax.(api).whatever to jakarta.(api).whatever. It is not (currently, maybe ever) expected that web applications written for Tomcat 9 can be directly run under Tomcat 10: they will require migration to the new API package names. That includes all servlets, etc.[2] There is an experimental migration tool available[3] which aims to migrate your web applications from Java EE to Jakarta EE. I'd be interested to see if it works for you and gives you artifacts you can successfully deploy into Tomcat 10. [1] https://jakarta.ee/specifications/authentication/1.1/apidocs/ [2] http://tomcat.apache.org/migration-10.html#Specification_APIs [3] https://github.com/apache/tomcat-jakartaee-migration > Would we have to support both in Tomcat 10 so that the implementation is > backwards compatible or am I mislead? I don't believe any backward-compatibility would be expected. We toyed with that idea, but it seems like a maintenance nightmare so we decided not to do it. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org