Remove CAS module

[marcusdacoregio]

We should remove the CAS module entirely since we depend on the java client and there are no plans to support Jakarta EE 9 in it.

[Emkas]

Hello @marcusdacoregio,
Since me and my team have been using spring-security-cas (and cas-client-core) for years, can you tell us is there any link or resource online about Apereo doesn't want to support Jakarta EE 9 so we could read this and maybe debate about it? I saw this issue last week and I tried to find some info about this, but with no results.

[marcusdacoregio]

Hi @Emkas, thanks for reaching out.

I tried to get in touch with them through some emails sent to their mailing lists, but it seems that those lists are not working.

Disabling the CAS module is not a definitive action and can be reverted if they release a version of their library that supports Jakarta EE 9.

Any help to get in touch with them would be awesome if you are interested.

[Emkas]

OK, so it's based on silence, not on some plain statement. I was afraid of that.

Not so long ago I've sent some PR's in java-cas-client. For a start. To see how their are working (as I did in Spring Security :-)). I get no feedback. And well.... java-cas-client looks like an abandoned project, only changes that are approved are PR's from bots with dependency updates (separate branches and then merged - or not - to the master - by another bot?).

I'm interested, but unfortunately I don't have any inside knowledge or contacts.

---

I've starting to write this message and in the meantime, I've bump my PR in java-cas-client and it was merged within 3 minutes :-) Maybe not the best place, but I'll try to get some info there.

[Emkas]

From apereo/java-cas-client#612 (comment)

As you surely know, this is an open-source project. There are no "plans" to do anything. Plans are made when someone shows up with a pull request, or someone pays someone to work on a pull request. Since those are unknown, I cant tell you about a pre-defined plan. All I can tell you is, atm, there are no plans since there is no pending PR, and AFAIK, nobody is paid to work on that feature. (Even pending PRs would be reviewed as time allows)

Support for Jakarta generally would happen around the time of Spring Boot 3 and Spring 6. Too soon to "plan" for anything.

[marcusdacoregio]

Thank you for getting that information with the maintainers.

I guess that there isn't much to do from our side but wait on them. We have some time before next Spring's major versions go GA.

[xhaggi]

The CAS client has just been updated to JDK 17 + Jakarta EE. I've create an issue #11674 to re-add the CAS module.