Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Google: Drop old jwt-core dependencies #2641

Merged
merged 2 commits into from
Apr 12, 2021

Conversation

armanbilge
Copy link
Contributor

This drops the jwt-core dependency from the Google connectors since this is now handled in google-common.

Unfortunately, this is currently a potentially fatal bug: the google-common module depends on a recent version of jwt-scala that has a new Maven organization name but retains the same package name as jwt-core, which IIUC creates a classpath conflict that SBT will not automatically resolve via eviction. Due to API changes, if the old JWT classes are used instead of the new then authorization requests to Google will fail.

@probot-autolabeler probot-autolabeler bot added the dependency-change For PRs changing the version of a dependency. label Apr 5, 2021
@seglo
Copy link
Member

seglo commented Apr 12, 2021

I see. Hopefully that's a small subset of users who directly depend on the old jwt-core and an Alpakka Google connector. If there is a problem I expect people will find this PR and comment.

Copy link
Member

@seglo seglo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@seglo seglo changed the title Drop old jwt-core dependencies Google: Drop old jwt-core dependencies Apr 12, 2021
@seglo seglo merged commit 0df5d7e into akka:master Apr 12, 2021
@seglo seglo added this to the 3.0.0-M2 milestone Apr 12, 2021
@armanbilge
Copy link
Contributor Author

Hopefully that's a small subset of users who directly depend on the old jwt-core

We can also help mitigate this via #2580. Thanks for merging!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants