PI25681;8.5.5: remove export packages of the org.apache.commons.codec from com.ibm.ws.security.oidc.client.jar

Download Description

PI25681 resolves the following problem:

ERROR DESCRIPTION:
The application cannot load its own version of the org.apache.commons.codec.binary.Base64 class that is packaged within the application. The new (WAS_HOME)/plugins/com.ibm.ws.security.oidc.client_1.0.0.jar shipped with fix pack v8.5.5.3 is loaded instead. This causes the application failed with NoSuchMethodError:

java.lang.NoSuchMethodError:
org/apache/commons/codec/binary/Base64.isBase64(Ljava/lang/String;)

LOCAL FIX:
Change the classloader mode for the WAR to parent_last.

PROBLEM SUMMARY

USERS AFFECTED:
All users of IBM WebSphere Application Server

PROBLEM DESCRIPTION:
An application that has packaged org.apache.commons packages with its application may experience an initialization failure. Setting the PARENT_LAST classloader policy can alleviate the problem.

RECOMMENDATION:
Install a fix pack that contains this APAR.

PROBLEM CONCLUSION:
In com.ibm.ws.security.oidc.client_1.0.0.jar, org.apache.commons packages are exported for use by com.ibm.ws.security.openid20.client.jar. These exports may cause applications that package their own version of the org.apache.commons.code packages to fail to initialize.

The org.apache.commons.codec, org.apache.commons.codec.binary, and org.apache.commons.codec.net packages are removed from com.ibm.ws.security.oidc.client_1.0.0.jar. These packages are now bundled in both com.ibm.ws.security.oidc.client_1.0.0.jar and com.ibm.ws.security.openid20.client.jar.

The fix for this APAR is currently targeted for inclusion in fix pack 8.5.5.4. Please refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Keywords: IBMWL3WSS, OIDC, INTERIMFIX