5 Replies Latest reply on May 13, 2016 10:20 AM by magsy

    SAML2LogOutHandler, core package, tied to JBoss

    magsy

      The SAML2LogOutHandler class is in the core package, however in 2.1.4, it includes a dependency on JBoss causing this when run in Tomcat:

       

      java.lang.ClassNotFoundException: org.jboss.security.audit.AuditEvent

      org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1680)

      org.apache.catalina.loader.WebappClassLoader.loadClass(WebappClassLoader.java:1526)

      org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler.<init>(SAML2LogOutHandler.java:72)

       

      It's only used once:

       

      PicketLinkAuditEvent auditEvent = new PicketLinkAuditEvent(AuditLevel.INFO);

       

      This wasn't the case in 2.0.x. I'd suggest the JBoss dependency is removed and the relevant code placed into a subclass within the JBoss package, leaving this handler platform independent.

       

       

      John