Jetty 9.x will be soon no more maintained

[sbernard31]

Jetty 9/10/11 all go full EOL on January 1, 2025. (no more updates)

source :

• Added a UriCompliance.Violation.USER_INFO to deprecate user info in HttpURI jetty/jetty.project#12012 (comment)
• EoCS (End of Community Support) for Jetty 9 - June 2022 jetty/jetty.project#7958

The only supported one will be v12 which use 17 as minimum version ...

So either :

• we migrate to v12 which will lead to a painful situation where we have different java constraint by leshan component ... 😞
• we don't migrate this is just a demo (I do not like so much this one)
• we find an alternative which is compliant with java8

( When we will remove jetty 9.x dependencies, we should remove corresponding CVE in .trivyignore)

[jvermillard]

Another alternative is to use the HTTP server in the JDK:
https://docs.oracle.com/en/java/javase/11/docs/api/jdk.httpserver/com/sun/net/httpserver/HttpServer.html
It's here since forever (1.6?) in the com.sun.* namespace but since https://openjdk.org/jeps/408 in java 18 it's pretty sure it will not go away

[sbernard31]

@jvermillard thx for sharing this !

I think if we can remove a useless dependencies this is a good thing.
Do you know if there is any support of Server Sent Event ? (I will not be surprised if there was no support of it)

[jvermillard]

never tried: https://stackoverflow.com/questions/67915286/java-sse-server-with-com-sun-net-httpserver-httpserver
another option is long polling which should work for sure