Recipe for migration JakartaEE Security is wrong

[mabartos]

Packages in our codebase were changed from javax.security.* to jakarta.security.* even though any dependency of javax.security.enterprise is included in the project.

The security packages javax.security.* are included in the JDK itself, and for JDK 11, it still contains the prefix javax.*, so probably these packages should not be updated in the codebase.

If we specify the required packages more, we'll avoid unnecessary collisions.

Issue to OpenRewrite docs: openrewrite/rewrite-docs#111

See: quarkusio/quarkus#30198
keycloak/keycloak#16247

[tkvangorder]

@mabartos Thank you for reporting this.

I am going to open re-open this, as there is more to do in this area:

• We need a recipe for Jakarta Authorization API.
• We need a recipe for Jakarta Authentication API.

Look for a PR shortly.