OLTU possibly moving to Attic


Ryan Goulding <ryandgoulding@...>
 

Hi AAA Team,

Unfortunately, there is chatter of oltu [0] joining Apache Attic [1] in recent discussions [2] on the oltu dev list.  My messages to dev@... have not made it through the strict spam filter, asking about when we might expect a release containing OLTU-209 [3], a migration from org.json/json which we also embarking in as a part of ODLPARENT-36 [4].  [2] implies there might be one more release containing this bug fix, but also states that this project may likely enter the attic.  Since we depend on oltu [5] since LONG before I joined this project, we need to assess a way forward.  This could involve replacement of oltu as our OAuth2 implementation.  We could also fork it (it is allowed by the license) or step up and maintain it properly.  I am posting to see if others have opinions.  I am in favor of using a more frequently maintained upstream dependency.


Ryan Goulding <ryandgoulding@...>
 

Opened AAA-162 [0] to transition AAA off oltu.

On Fri, Feb 9, 2018 at 2:50 PM, Ryan Goulding <ryandgoulding@...> wrote:
Hi AAA Team,

Unfortunately, there is chatter of oltu [0] joining Apache Attic [1] in recent discussions [2] on the oltu dev list.  My messages to dev@... have not made it through the strict spam filter, asking about when we might expect a release containing OLTU-209 [3], a migration from org.json/json which we also embarking in as a part of ODLPARENT-36 [4].  [2] implies there might be one more release containing this bug fix, but also states that this project may likely enter the attic.  Since we depend on oltu [5] since LONG before I joined this project, we need to assess a way forward.  This could involve replacement of oltu as our OAuth2 implementation.  We could also fork it (it is allowed by the license) or step up and maintain it properly.  I am posting to see if others have opinions.  I am in favor of using a more frequently maintained upstream dependency.