Description
This issue is a follow-up of OAK-3201. SecurityProviderImpl is currently doing two different things. First, it is an implementation of SecurityProvider that is supposed to be used outside of OSGi. Second, it is an OSGi component capable of fetching its dependencies from the service registry.
I propose to split this two concerns in two different classes, and apply this concept to both SecurityProviderImpl and its dependencies. I proposed a patch in OAK-3201 outlining a possible solution. The comments in OAK-3201 provide more insights about the proposal.