[OAK-6035] Mark AbstractLoginModule and Authentication as provider types

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7.0, 1.8.0
• Fix Version/s: 1.7.0, 1.8.0
• Component/s: security
• Labels: modularization
• Epic Link: Modularisation of Oak
• Assignee: Alex Deparvu
• Reporter: Robert Munteanu
• Created: 05/Apr/17 07:50
• Updated: 17/May/22 08:24
• Resolved: 05/Apr/17 10:19

Description

With OAK-5903 the AbstractLoginModule and Authentication interfaces received new methods and the exported package version was bumped from 1.1.0 to 2..0.0. This is unfortunately a breaking change for anyone importing the org.apache.jackrabbit.oak.spi.security.authentication, including Sling's oak-server module.

To me these classes do not look as they are usually implemented by clients, but part of an SPI implemented mostly by oak-core, e.g. they are 'provider types' in OSGi vocabulary.

I've marked them with the @ProviderType annotation which allows the exported package version to only be increased to 1.2.0 and allows consumer to reference those packages without changing import ranges across all Oak version.

Issue Links

• is related to: OAK-9770 incorrect annotation on AbstractLoginModule