[CAMEL-10765] Remove unused oauth dependency from camel-cxf pom

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.18.1
• Fix Version/s: 2.19.0
• Component/s: camel-cxf
• Patch Info: Patch Available
• Estimated Complexity: Novice
• Assignee: Claus Ibsen
• Reporter: Thomas Papke
• Created: 30/Jan/17 14:08
• Updated: 30/Jan/17 18:26
• Resolved: 30/Jan/17 16:45

Description

I use camel-cxf component, which currently bring some transitive "oauth" jars:

[INFO] +- org.apache.camel:camel-cxf:jar:2.18.1:compile
[INFO] |  \- org.apache.cxf:cxf-rt-rs-security-oauth:jar:3.1.9:compile
[INFO] |     \- net.oauth.core:oauth-provider:jar:20100527:compile
[INFO] |        \- net.oauth.core:oauth:jar:20100527:compile

I have looked at the camel-cxf documentation and also scan the code of camel-cxf, but here is currently no oauth(1) handling implemented. So I assume this dependency is not correctly defined. I have tried to remove it, but camel-cxf seems to transitive rely on cxf-rt-rs-client.

Proposal for change:

• Remove oauth dependency and proper define dependency to cxf-rt-rs-client (since this module compile against org.apache.cxf.jaxrs.client):

  diff --git a/components/camel-cxf/pom.xml b/components/camel-cxf/pom.xml
  index 5c917bc..0415781 100644
  --- a/components/camel-cxf/pom.xml
  +++ b/components/camel-cxf/pom.xml
  @@ -110,7 +110,7 @@
       </dependency>
       <dependency>
           <groupId>org.apache.cxf</groupId>
  -        <artifactId>cxf-rt-rs-security-oauth</artifactId>
  +        <artifactId>cxf-rt-rs-client</artifactId>
           <version>${cxf-version}</version>
       </dependency>
  

With this patch, camel-cxf module still run successfully.

Issue Links

• links to: GitHub Pull Request #1428