[JIRA] (JOIDC-54) Plugin makes indirect use of AWT
Ian Young (Jira)
jira at shibboleth.atlassian.net
Wed Aug 18 14:32:56 UTC 2021
Ian Young ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ae127cb03-43ed-473d-b6ba-592949cb4be8 ) *created* an issue
IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiODYyNWE1NzAwNzlmNDhmZmJjNTZkNWNiNTJkNTNkOGYiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/JOIDC-54?atlOrigin=eyJpIjoiODYyNWE1NzAwNzlmNDhmZmJjNTZkNWNiNTJkNTNkOGYiLCJwIjoiaiJ9 ) JOIDC-54 ( https://shibboleth.atlassian.net/browse/JOIDC-54?atlOrigin=eyJpIjoiODYyNWE1NzAwNzlmNDhmZmJjNTZkNWNiNTJkNTNkOGYiLCJwIjoiaiJ9 ) Plugin makes indirect use of AWT ( https://shibboleth.atlassian.net/browse/JOIDC-54?atlOrigin=eyJpIjoiODYyNWE1NzAwNzlmNDhmZmJjNTZkNWNiNTJkNTNkOGYiLCJwIjoiaiJ9 )
Issue Type: Improvement Affects Versions: 3.0.1 Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Created: 18/Aug/21 10:32 AM Priority: Trivial Reporter: Ian Young ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3Ae127cb03-43ed-473d-b6ba-592949cb4be8 )
Over in GEN-281 ( https://shibboleth.atlassian.net/browse/GEN-281 ) Open , I note that the plugin makes use of the `java.desktop` module, perhaps inadvertently, in that it uses `javax.imageio.ImageIO::read`.
This makes the IdP an AWT application. I've looked around and seen some comments that this will turn the application into an anonymous desktop application and do things like steal desktop focus when it's invoked. Those seem low impact on a server, of course.
The reason I hit this was that on Debian 11 (this may be true in other Linux distributions) there are two JDK variants: a normal one and a "headless" one for use when you don't have a keyboard/mouse/display. If you install the headless JDK variant, the native libraries that back up AWT aren't installed and the OIDC plugin fails.
It seems to me desirable that the IdP should run in a headless environment.
( https://shibboleth.atlassian.net/browse/JOIDC-54#add-comment?atlOrigin=eyJpIjoiODYyNWE1NzAwNzlmNDhmZmJjNTZkNWNiNTJkNTNkOGYiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-54#add-comment?atlOrigin=eyJpIjoiODYyNWE1NzAwNzlmNDhmZmJjNTZkNWNiNTJkNTNkOGYiLCJwIjoiaiJ9 )
Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100174- sha1:7655f04 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20210818/4527905f/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-94ef3fcc-96bf-44ae-8be8-ccfd258ceff1
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20210818/4527905f/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-8e4c8a63-72a5-40f9-a400-8de0e6233712
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20210818/4527905f/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-e7c3ba7e-3288-43b4-b118-937c96df2556
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20210818/4527905f/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-8367a4d7-eeb0-4875-ac10-09222974b1b2
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20210818/4527905f/attachment-0007.png>
More information about the commits
mailing list