Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [jakartaee-platform-dev] Moving MicroProfile JWT to Jakarta Security?

Getting back from PTO ...

On Nov 10, 2022, at 11:05 AM, Rudy De Busscher <rdebusscher@xxxxxxxxx> wrote:

Sorry, the financial argument doesn't make sense to me. Most companies/groups that are part of the MicroProfile WorkingGroup are also part of the Jakarta EE one. So today, they paid twice.

The Jakarta EE price was reduced to compensate for MicroProfile. Red Hat reduced its membership level in Jakarta because we have good hearing, I guess.


One WorkingGroup makes much more sense from that point of view and also from the developer that doesn't understand why Jakarta and MicroProfile don't merge (and provide a single coherent technical solution for their challenges) since the reason MicroProfile was founded is no longer valid.

The reason is still valid, if not needed even more. There is a clear contrast in how specs are developed in MicroProfile vs Jakarta. 


Rudy

On Thu, 10 Nov 2022 at 19:42, David Blevins <dblevins@xxxxxxxxxxxxx> wrote:
+1
On Nov 10, 2022, at 10:29 AM, John Clingan <jclingan@xxxxxxxxxx> wrote:

I’m inserting this as a general  point in this discussion,  which is related to joining the MP JWT call.

There are non-technical reasons MicroProfile exists. MicroProfile is a flatter working group with fewer processes, somewhat different values (like backwards compatibility differences), releases more often, and  is $250,000 USD cheaper *annually* (for large organizations) than joining Jakarta EE Working Group as a strategic member. Whenever talk of moving a specification to Jakarta, I feel the need to remind folks of the non-technical differences between Jakarta and MicroProfile.

For these reasons, I am against moving *any* specifications out of MicroProfile to Jakarta, although I am open to the idea of moving Jakarta specifications to MicroProfile. The exception is concurrency, which was always intended to move to Jakarta.

My two cents.

On Nov 9, 2022, at 9:52 AM, David Blevins <dblevins@xxxxxxxxxxxxx> wrote:

On Nov 9, 2022, at 6:31 AM, arjan tijms <arjan.tijms@xxxxxxxxx> wrote:

Hi,

On Tue, Nov 8, 2022 at 9:55 PM David Blevins <dblevins@xxxxxxxxxxxxx> wrote:
MP JWT does define bindings for EJB, Servlets, JACC, JASPIC, etc.

True, although essentially spelling out everything is unnecessary if one just says that MP JWT in a Jakarta EE environment is/exposes itself as an Jakarta Security Authentication Mechanism. All those other things then follow from that. Specifically this authentication mechanism bit is missing there. I do see identity store being mentioned, and perhaps it comes from the confusion that many people have between the concept of an authentication mechanism (FORM, BASIC, etc) and an identity store (DB, LDAP, FILE, etc). 

I'd be on board for making these kinds of changes and improvements in MP JWT.  The next version planned is 3.0, so we can even make breaking changes if we needed to accommodate.  The next MP JWT call is Thursday, November 17th at 8:00am Pacific.  Are you open to attending at least once and discussing?  Here's the call information:


I do understand how things can feel that way from an emotional perspective.  My emotional perspective is that we're fortunate to have this conversation at all, because when MicroProfile and MP JWT were created Java EE was dead with no plans to continue.  I'm thankful and proud of MicroProfile for its impact on the decision to open source Java EE.  I'm happy that both Jakarta EE and MicroProfile now live at the Eclipse Foundation and are implemented side-by-side in most the major implementations.

Sure, we don't want duplication between specs, but we also don't want duplication between say two specs in Jakarta EE.  Compared to the challenges we've faced over the last 6 or 7 years, this feels very manageable.


-David

_______________________________________________
jakartaee-platform-dev mailing list
jakartaee-platform-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/jakartaee-platform-dev

_______________________________________________
jakartaee-platform-dev mailing list
jakartaee-platform-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/jakartaee-platform-dev

_______________________________________________
jakartaee-platform-dev mailing list
jakartaee-platform-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/jakartaee-platform-dev
_______________________________________________
jakartaee-platform-dev mailing list
jakartaee-platform-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/jakartaee-platform-dev


Back to the top