Migration of policy xacml-pdp to Java 17

Owned by Francesco Fiora
Aug 24, 2023
1 min read

As already defined, the main blocker for policy/xacml-pdp is the com.att.research:xacml-pdp dependency (AT&T's reference implementation of the OASIS XACML 3.0 Standard.)

<dependency> <groupId>com.att.research.xacml</groupId> <artifactId>xacml-pdp</artifactId> <version>3.1.0</version> </dependency>

The com.att.research:xacml-pdp dependency uses javax XML binding non compatible with java 17. (Last xacml-pdp release could be found here: https://mvnrepository.com/artifact/com.att.research.xacml/xacml-pdp/3.1.0)

Information about Jakarta could found here: https://en.wikipedia.org/wiki/Jakarta_EE

The Jakarta EE 9 release on Dec 8th, 2020, would introduce jakarta.* as the namespace to replace javax.* for Jakarta EE specifications. (Full article is here: https://jakarta.ee/blogs/javax-jakartaee-namespace-ecosystem-progress/)

Last Jakarta release, Jakarta EE 10 as minimum Java SE Version, Java SE 11 or higher.

Valid options for com.att.research:xacml-pdp and .att.research:xacml to move as major version:

  • only migrate to Jakarta EE 10 and maintain the compatibility with Java 11


  • migrate to Jakarta EE 10 and Java 17 (maybe the best option)