I'm trying to check if my springboot app can upgrade to springboot 3 when it will release officially. One of the breaking changes is that all javax has been replaced by jakarta libs.

All of my libs are supporting support that except one, spring-security-cas. As of now what I can see on the public project is that the latest version is still 5.8.0.

I can also see that on the github project of spring security the CAS part has been removed since the 6.0.0 version.

Does anyone know if there will be a 6.0.0 version like for other spring security libs or is it deprecated ?

CodePudding user response：

There won't be (at the moment) as it has been removed. See this issue from Spring Security on the removal (basically there is never going to be a JakartaEE version of the java client and hence no support).

A couple of days a snippet was added to the documentation (see this commit) on what you can do as a replacement/workaround. Which leads to this documentation in the reference guide.

There has been some activity on the Java CAS Client, so it might be re-added before GA or in a next major release of Spring Security. See this issue.