Reduce usage of external dependencies #909
Description
The Azure Identity SDK project is aiming to minimize the number of external dependencies, as they can lead to security risks and compatibility issues for customers.
The specific ask for MSAL Java is to evaluate and remove these dependencies:
- com.nimbusds.oauth-oidc-sdk
- Only used for some very specific OAuth behaviors. Risk of regression and must be thoroughly tested
- Investigate and reduce usage of com.nimbusds dependencies #889
- net.minidev.json-smart
- Azure SDK team suggested an alternative package for JSON parsing: azure-json
- Unfortunately the main places we use this are due to it being used in com.nimbusds.oauth-oidc-sdk, so this cannot be easily removed without also removing com.nimbusds.oauth-oidc-sdk
- org.slf4j.slf4j-api & org.slf4j.slf4j-simple
- Azure SDK team suggested reflective approach to loading the SLF4j types if they are on the class path, example here
- org.projectlombok.lombok
- Can simply be replaced by the same code it generates
- com.fasterxml.jackson.core
- Consider dropping Jackson-databind dependency #441
- Available in azure-core https://mvnrepository.com/artifact/com.azure/azure-core
- Can be replaced by https://mvnrepository.com/artifact/com.azure/azure-json