Hello people, I have a question regarding web.xml. Is it mandatory to use? I have seen some examples that use it and others do not. in https://github.com/eclipse-ee4j/soteria/tree/master/test , https:

Hi, Justs heads up that we already have a new mailing list at Eclipse: es-dev@... This list has 41 subscribers while the new one has only 7! Please subscribe there and if you are an Eclipse Commiter f

Hi All, The Soteria project depends (for testing purposes) on IBM's commercial version of Liberty. This is a problem for the Eclipse migration, as Eclipse won't accept contributions not governed by an

All, I just found a very bad bug in Soteria 1.0 as it's out there in MavenCentral since August 2017 ;-/ I can't even set labels like "bug" but it is clearly a major bug and showstopper from using Sote

We're currently seeding two projects with initial committers we'd like to make sure the existing EG can get their names on the initial proposal. Of course everyone can join after, but it's always more

Hi, I am currently helping a large client who needs Role and Identity Management in a Microservice environment using Java EE (Payara to be more precise, which helps because it got Soteria built-in rec

Hi, For the ones who haven’t seen it yet; OpenLiberty started with their own implementation of JSR 375. See: https://github.com/OpenLiberty/open-liberty/tree/master/dev/com.ibm.ws.security.javaeesec/s

Hi, Without an EG being active and with the EE transfer in progress so that there's being little chance of starting an EG now or before long, I wonder what the best way forward is at this moment for J

Dear All, The JCP page has not been updated yet, but JSR 375 won the JCP Award for Most Significant JSR as announced at the JCP Party last night: https://jcp.org/en/press/news/awards/2017award_nominee

Hi, Now that the 1.0 release is posted on Maven Central, can someone just check if I am following the POMs completely wrong: org.glassfish.security:javax.security.enterprise 1.0 contains the following

Hi, Currently Maven central only has the b07 release. See http://central.maven.org/maven2/org/glassfish/soteria/javax.security.enterprise It would perhaps be a good idea to release 1.0 too ;) Kind reg

This overlaps with JavaOne, but maybe someone in Europe or the UK who can't make it to JavaOne this year could also enjoy this Security event. Kind Regards, Werner ---------- Forwarded message -----

If anyone's working in the github.com/javaee-security-spec/security-examples repo, please note that I'll be moving it to the Java EE org (github.com/javaee) sometime in the next 12 hours.

Hi all, Today we passed our Final Approval Ballot: https://jcp.org/en/jsr/results?id=6044 The result is an unanimous yes, with only Intel not having voted. Thanks to everybody involved :) Without all

Arjan, Can you have a look at #174, and let me know what you think ASAP? To summarize, I think the RememberMeInterceptor must call invocationContext.proceed(), to delegat

All, It looks to me as if the following branches can be pruned from the JSR-375 repos. Any objections? I won't do this soon, but please let me know asap if any of them need to be pr

All: I'd like to make the security-examples repo an "official" repo for the JSR, and move it into the Java EE org. The GF doc/samples team is looking for JSR-375 samples, and it mak

FYI, this message was also sent directly to EG members. -------- Forwarded Message -------- Subject: ACTION REQUIRE

All: Unfortunately, I won't be able to attend JavaOne in October, so can't present the session that I'd planned. Fortunately, Ivar Grimstad will be attending, and has agreed

I've been looking at the pile of bugs currently filed against the default LdapIdentityStore in Soteria, and have noticed a couple broad themes. I'd appreciate some feedback on these ASAP, as w