OpenSaml V3 for Apache Felix OSGI

[Cris Rockwell]

Hello Shibboleth Developers

I am working to add SAML2 Service Provider authentication handling to Apache Sling.

My work in progress can be viewed on Github below
https://github.com/cmrockwell/sling-whiteboard/tree/sling-saml2-service-provider/saml-handler <https://github.com/cmrockwell/sling-whiteboard/tree/sling-saml2-service-provider/saml-handler>

I have found the OpenSaml V3 eBook to be useful, but I am having trouble getting my OSGI bundle to Activate due to dependencies.  I have tried the servicemix opensaml wrapper <https://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apache.servicemix.bundles.opensaml/3.4.3_2> but it seems to have the same issues in this environment (Apache Felix) as just embedding the opensaml modules directly, and I prefer to include just the relevant modules anyway.

My project pom.xml is set up to embed OpenSaml’s dependencies as well as the transitive dependencies. This approach usually works, but is a bit ham-fisted. But in this case even with this, there are dependencies that are not resolving.

In particular, these are the packages that cannot be imported.

com.beust.jcommander -- Cannot be resolved
com.beust.jcommander.converters -- Cannot be resolved
com.google.appengine.api -- Cannot be resolved
com.google.apphosting.api -- Cannot be resolved
com.google.errorprone.annotations.concurrent -- Cannot be resolved

org.apache.velocity -- Cannot be resolved
org.apache.velocity.app -- Cannot be resolved
org.apache.velocity.context -- Cannot be resolved
org.apache.velocity.exception -- Cannot be resolved
org.apache.velocity.runtime -- Cannot be resolved
org.apache.velocity.runtime.log -- Cannot be resolved
org.apache.velocity.runtime.resource.loader -- Cannot be resolved
org.apache.velocity.runtime.resource.util -- Cannot be resolved

org.apache.xml.dtm -- Cannot be resolved
org.apache.xml.utils -- Cannot be resolved
org.apache.xpath -- Cannot be resolved
org.apache.xpath.compiler -- Cannot be resolved
org.apache.xpath.functions -- Cannot be resolved
org.apache.xpath.objects -- Cannot be resolved

org.joda.convert -- Cannot be resolved
org.relaxng.datatype -- Cannot be resolved

Based on the ebook and several posts  I expect bouncycastle will need to the added to 
https://vzurczak.wordpress.com/2017/09/04/bouncycastle-osgi-and-uber-jars/ <https://vzurczak.wordpress.com/2017/09/04/bouncycastle-osgi-and-uber-jars/>
https://stackoverflow.com/questions/26624104/bundle-will-not-start-when-bouncy-castle-is-imported <https://stackoverflow.com/questions/26624104/bundle-will-not-start-when-bouncy-castle-is-imported>
org.bouncycastle.cert -- Cannot be resolved
org.bouncycastle.cert.jcajce -- Cannot be resolved
org.bouncycastle.openssl.jcajce -- Cannot be resolved
org.bouncycastle.operator -- Cannot be resolved
org.bouncycastle.operator.jcajce -- Cannot be resolved


If anyone has suggestions that could help, or information about some of these dependencies, I would very much appreciate any ideas.

Thanks!
Cris Rockwell
Applications Architect Sr  
College of Literature, Science, and the Arts | University of Michigan 
LSA Technology Services | 6503 Haven Hall | 505 S. State Street | Ann Arbor, MI I 48109
Desk: 734.763.6818 | Email: cmrockwe at umich.edu

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20200218/c8d1aeeb/attachment.html>