dotCMS / dotCMS/core

Task 4.4: Migrate Security Libraries

Open
#32,691 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

stale Team : Platform Type : Task
Dominant language
Java
Stars
970
Forks
486
Avg merge
3d 33m
Merged PRs (30d)
170

Description

Task Description

Migrate security-related libraries from repackaged versions to standard Maven Central versions.

Status: ⏳ PENDING
Implementation
  • PR: TBD
  • Branch: issue-{issue_number}-migrate-security-libraries
  • Changes: Update cryptography, authentication, and authorization libraries
Acceptance Criteria
  • [ ] Replace repackaged cryptography libraries with standard versions
  • [ ] Replace repackaged authentication libraries with standard versions
  • [ ] Replace repackaged authorization libraries with standard versions
  • [ ] Update all security-related code
  • [ ] Verify encryption/decryption operations
  • [ ] Test authentication workflows
  • [ ] Test authorization mechanisms
  • [ ] Security vulnerability scanning
  • [ ] All tests pass
  • [ ] Update security documentation
Related
  • Epic: #32675 - Remove Repackaged Dependencies
Risk Level: High
  • Breaking Changes: High (security is critical)
  • Testing Required: Comprehensive security testing
  • Dependencies: Affects all security-related functionality

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading epic #32675 and identifying the security-related libraries and affected code; the issue names no files or tests. Done requires replacing the repackaged cryptography, authentication, and authorization libraries, updating affected security code and documentation, and completing the listed security tests and vulnerability scanning.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, authorization, security
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.