fix(fido2): remove weld dependency

[yurem]

Closes #8870,

• I confirm that there is no impact on the docs due to the code changes in this PR.

[dryrunsecurity]

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security	Status	Findings
Configured Codepaths Analyzer	✅	0 findings
IDOR Analyzer	✅	0 findings
Secrets Analyzer	✅	0 findings
Authn/Authz Analyzer	✅	0 findings
Server-Side Request Forgery Analyzer	✅	0 findings
SQL Injection Analyzer	✅	0 findings
Sensitive Files Analyzer	❕	1 finding

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖. Note that this summary is auto-generated and not meant to be a definitive list of security issues but rather a helpful summary from a security perspective.

Summary:

The code changes in this pull request primarily involve dependency management updates to the pom.xml file for the jans-fido2/model module. The key changes include the removal of Weld dependencies, the replacement of the jakarta.servlet dependency with jakarta.enterprise.cdi-api, and the addition of a new dependency on io.jans:jans-doc.

While the changes are not directly related to security-critical functionality, they are worth reviewing from an application security perspective. The removal of the Weld dependencies and the upgrade to the latest Jakarta EE specification could have broader architectural implications that should be evaluated. Additionally, the new dependency on io.jans:jans-doc should be investigated to understand its purpose and potential security implications.

Overall, the changes appear to be focused on dependency management and potential architectural changes, rather than directly addressing security-critical functionality. However, it is still important to review the broader context and understand how these changes may impact the application's security posture.

Files Changed:

• jans-fido2/model/pom.xml: This file has been updated to manage the project's dependencies. The key changes include:
  1. Removal of the Weld dependencies (weld-servlet-core and weld-core-impl) and the jakarta.servlet-api dependency.
  2. Addition of a new dependency on io.jans:jans-doc.
  3. Replacement of the jakarta.servlet dependency with jakarta.enterprise:jakarta.enterprise.cdi-api.

Powered by DryRun Security

[mo-auto]

Error: Hi @yurem, You did not reference an open issue in your PR. I attempted to create an issue for you.
Please update that issues' title and body and make sure I correctly referenced it in the above PRs body.

[sonarcloud]

Quality Gate passed for 'Fido2 API'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[sonarcloud]

Quality Gate passed for 'jans-linux-setup'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud