Skip to content

Reduce usage of external dependencies #909

@Avery-Dunn

Description

@Avery-Dunn
Contributor

The Azure Identity SDK project is aiming to minimize the number of external dependencies, as they can lead to security risks and compatibility issues for customers.

The specific ask for MSAL Java is to evaluate and remove these dependencies:

  • com.nimbusds.oauth-oidc-sdk
  • net.minidev.json-smart
    • Azure SDK team suggested an alternative package for JSON parsing: azure-json
    • Unfortunately the main places we use this are due to it being used in com.nimbusds.oauth-oidc-sdk, so this cannot be easily removed without also removing com.nimbusds.oauth-oidc-sdk
  • org.slf4j.slf4j-api & org.slf4j.slf4j-simple
    • Azure SDK team suggested reflective approach to loading the SLF4j types if they are on the class path, example here
  • org.projectlombok.lombok
    • Can simply be replaced by the same code it generates
  • com.fasterxml.jackson.core

Activity

added
AzureSDKIssues and requests affecting the Azure SDK
DependenciesPull requests that update a dependency file
EpicA large milestone feature, or the parent of many features
P2Normal priority items, should be done after P1
on Feb 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    AzureSDKIssues and requests affecting the Azure SDKDependenciesPull requests that update a dependency fileEpicA large milestone feature, or the parent of many featuresP2Normal priority items, should be done after P1

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @Avery-Dunn

        Issue actions

          Reduce usage of external dependencies · Issue #909 · AzureAD/microsoft-authentication-library-for-java