Relationship between Payara Platform, MicroProfile and Java EE/Jakarta EE

This site uses Akismet to reduce spam. Learn how your comment data is processed.

1. Volker Kuhn

   15/10/2019 12:23

   Hi Rudy,

   When will JWT officially integrate with Jakarta EE Security in a next release of MicroProfile?

   Reply
2. Rudy De Busscher

   15/10/2019 03:02

   Hi Volker,

   The integration needs to be defined by Jakarta EE Security (and MicroProfile JWT Auth has already defined some optional requirements when running in a Java EE server) but I cannot give you an answer on when there is a formal integration into Jakarta EE for the moment. There is no Github issue for this yet, but support for JWT by Security API was already on the table in the past.

   However, you can already use it and you can see an example in this blog https://www.payara.fish/blog/java-ee-security-api-jsr-375/soteria-with-jwt-tokens.

   Regards
   Rudy

   Reply
3. Volker Kuhn

   16/10/2019 12:39

   Thanks for the detailed explanation, but I meant, when is MicroProfile going to officially be saying it uses Jakarta EE Security?

   I mean, it’s now using JAX-RS, CDI and JSON. When is MicroProfile saying it’s using JAX-RS, CDI, JSON and Jakarta Security?

   Reply
4. Rudy De Busscher

   16/10/2019 12:55

   MicroProfile is never going to use Java EE Security, because it means every MicroProfile implementation also needs to include JASPIC and JACC to name the 2 most important ones. Java EE Security is build on top of those two and thus requires them.

   Regards
   Rudy

   Reply
5. Volker Kuhn

   16/10/2019 02:43

   Oh, I thought JASPIC was quite small? Even Tomcat has it 😉

   Reply
6. Lars Gielsok

   21/01/2020 06:26

   How deep is the integration of Microprofile into Payara? Is it possible to use a newer Microprofile version with an older payara version by replacing/patching the corresponding app module jar?

   Reply
7. Rudy De Busscher

   23/01/2020 02:52

   Hi Lars,

   There is a deep integration of the Payara Server with MicroProfile. So replacing the jar files on an older version will probably fail, especially when the major version is different (MP 1x, 2.x and 3.x).
   Instead, it is recommended to upgrade Payara so that you also benefit from the bug fixings and additional features in the latest version.

   Best regards
   Rudy

   Reply