OpenSAML 2.6+ missing xml-api dependency in pom.

[Cantor, Scott]

On 2/25/14, 3:40 PM, "Randall,Matt" <MRANDALL at CERNER.COM> wrote:

>When we upgraded from OpenSAML 2.5 to 2.6 in our project, we had several
>failures due to missing classes in the org.w3c.dom package.  This appears
>to be caused by the exclusion of the xml-api dependency in the latest
>release of OpenSAML.

It's not excluded or included, it's a runtime dependency. The same was
true in the parent POM that was in place at the time of 2.5 (just checked).

I believe the DOM API is part of Java, and the runtime dependency has to
do with the historical problems that are the reason why this code branch
requires Xerces, and that's where the xml-apis jar comes from.

>I couldn¹t find any documentation regarding the need to include this
>dependency when using the library ­ is this an oversight in the pom
>configuration, or is there a larger body of documentation that I¹ve
>somehow overlooked discussing the need to choose a DOM implementation?

Yes, you are required to use Xerces, and that's it. The V2 code will not
be updated to support anything else.

-- Scott