Jakarta EE Platform Call

Date: 2023-03-14

Present:

Agenda and Minutes

Project Lead Survey responses (form)
- Input for security plans are needed as well as Jakarta Faces
- Needs to be reviewed and incorporated into Release Plan as appropriate
Release Plan DRAFT (source link)
- Jakarta EE 11 Discussion
  - Share with the wider community for input
  - A month for a feedback from the community should be fine
Discussion about security and problems related to Core Profile / layering:
- 2 HTTP stacks in EE: Servlet and REST.
  - Security largely uses Servlet (HTTPServletRequest etc)
  - Core Profile and Micro Profile use REST
    - Security can not layer upon either profile now
- Apache Shiro security project as example
  - Constraint definitions (which URLs are protected) now mostly use Servlet’s web.xml. XML is not universally loved, and alternatives, directly using Jakarta Security would be nice.
Plan to move to HTTP3 in Jakarta EE 11?
- Not sure at this point (to be discussed on the servlet mailing list)
- https://www.section.io/engineering-education/http3-vs-http2/
  - Impacts MicroProfile as well, to be discussed there also

Ed Burns, expressed interest, but needs to follow up internally for approval
Ed to approach, Scott, Steve M, Ivar for input and experiences as releases lead (manager) \

MicroProfile JWT and Jakarta Security…
View on Google Calendar
- When: Wed Mar 15, 2023 5pm – 6pm (GMT)
- Where: https://eclipse.zoom.us/j/89466014869