Azure-sdk-for-java: No class def found error with Azure ClientSecretCredential

Created on 22 Aug 2020 · 7Comments · Source: Azure/azure-sdk-for-java

Describe the bug
Getting the No class def found error when quering the Keyvault using Azure Keyvault secrets library (azure-security-keyvault-secrets)

Exception or Stack Trace
java.lang.ClassNotFoundException: com.microsoft.azure.keyvault.authentication.KeyVaultCredentials

Exception in thread "main" java.lang.NoClassDefFoundError: com/fasterxml/jackson/core/TSFBuilder at com.fasterxml.jackson.dataformat.xml.XmlMapper.<init>(XmlMapper.java:122) at com.azure.core.util.serializer.JacksonAdapter.<init>(JacksonAdapter.java:68) at com.azure.core.util.serializer.JacksonAdapter.createDefaultSerializerAdapter(JacksonAdapter.java:101) at com.azure.identity.implementation.IdentityClient.<clinit>(IdentityClient.java:89) at com.azure.identity.implementation.IdentityClientBuilder.build(IdentityClientBuilder.java:99) at com.azure.identity.ClientSecretCredential.<init>(ClientSecretCredential.java:50) at com.azure.identity.ClientSecretCredentialBuilder.build(ClientSecretCredentialBuilder.java:62) at com.concordfax.capture.core.azure.keyvault.AzureKeyVaultStore.getSecretClient(AzureKeyVaultStore.java:93) at com.concordfax.capture.core.azure.keyvault.AzureKeyVaultStore.queryKeyVaultSecrets(AzureKeyVaultStore.java:39) at com.auxolabs.cvision.pipeline.AzureKeyVaultStoreCore.main(AzureKeyVaultStoreCore.java:24) Caused by: java.lang.ClassNotFoundException: com.fasterxml.jackson.core.TSFBuilder at java.net.URLClassLoader.findClass(URLClassLoader.java:382) at java.lang.ClassLoader.loadClass(ClassLoader.java:424) at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349) at java.lang.ClassLoader.loadClass(ClassLoader.java:357) ... 10 more

To Reproduce
Steps to reproduce the behavior:
Use the below dependency versions in maven

com.fasterxml.jackson.datatype
jackson-datatype-joda
2.10.0

com.azure
azure-security-keyvault-secrets
4.2.0

com.azure
azure-identity
1.1.0

Code Snippet
public class AzureKeyVaultStoreCore { public static void main(String[] args) throws Exception { KeyVaultSecretsRequestModel keyVaultRequestModel = readKeyVaultEnvironmentVariables(); String kvUri = "https://" + keyVaultRequestModel.getKeyVaultName()+ ".vault.azure.net";

    ClientSecretCredential clientSecretCredential = new ClientSecretCredentialBuilder()
            .clientId(keyVaultRequestModel.getAzureClientId())
            .tenantId(keyVaultRequestModel.getAzureTenantId())
            .clientSecret(keyVaultRequestModel.getAzureClientSecret())
            .build();

    // Azure SDK client builders accept the credential as a parameter
    SecretClient client = new SecretClientBuilder()
            .vaultUrl(kvUri)
            .credential(clientSecretCredential)
            .buildClient();


    AzureKeyVaultStore azureKeyVaultStore = new AzureKeyVaultStore();
    List<String> queryList = new ArrayList<>();
    List<KeyVaultSecret> keyVaultSecretList = azureKeyVaultStore.queryKeyVaultSecrets(secretKeys);
    for ( KeyVaultSecret keyVaultSecret : keyVaultSecretList) {
        System.out.println("Fetched secret: " + keyVaultSecret.getValue());
    }


private static KeyVaultSecretsRequestModel readKeyVaultEnvironmentVariables() {
    KeyVaultSecretsRequestModel keyVaultRequestModel = new KeyVaultSecretsRequestModel();
    keyVaultRequestModel.setKeyVaultName(System.getenv("KeyVault__KeyVaultName"));
    keyVaultRequestModel.setAzureClientId(System.getenv("KeyVault__ClientId"));
    keyVaultRequestModel.setAzureClientSecret(System.getenv("KeyVault__ApplicationSecret"));
    keyVaultRequestModel.setAzureTenantId(System.getenv("AZURE_TENANT_ID"));
    return keyVaultRequestModel;
}

Expected behavior
Keyvault secrets should be fetched from the vault.

Setup (please complete the following information):

OS: Ubuntu
IDE : IntelliJ
Version of the Library used: 1.8

Additional context
pom.xml can be viewed at: https://codeshare.io/2jXbXD

Information Checklist
Kindly make sure that you have added all the following information above and checkoff the required fields otherwise we will treat the issuer as an incomplete report

[ ] Bug Description Added
[ ] Repro Steps Added
[ ] Setup information Added

Azure.Identity Client customer-reported question

Source

sudharsan2020

All 7 comments

Thanks for filing this issue @sudharsan2020. @g2vinay can you please assist @sudharsan2020 with resolving the dependency conflict?

https://github.com/Azure/azure-sdk-for-java/wiki/Frequently-Asked-Questions#dependency-conflict

joshfree on 25 Aug 2020

👍1

Hi @joshfree , I haven't heard any update on this. Could you please share the necessary steps to resolve this? This is impacting our deliverables.

sudharsan2020 on 31 Aug 2020

@sudharsan2020
I have been looking into this issue and trying to reproduce it.
The stack trace shows that somewhere in the application KeyVault Track 1 SDK is expected to be supplied while Track 2 SDK is being used here.
I'll share the updates of my findings here ASAP.

g2vinay on 31 Aug 2020

👍1

@sudharsan2020
Using the pom file configuration provided, I was able to reproduce the error in the stack trace.

Adding this dependency in the pom file resolved the issue for me. Adding this dependency in the top-level pom resolves the conflicts as it standardizes the jackson version to use in the application.

        <dependency>
            <groupId>com.fasterxml.jackson.core</groupId>
            <artifactId>jackson-core</artifactId>
            <version>2.10.0</version>
        </dependency>

You can use any version from 2.10.0 and up.

g2vinay on 31 Aug 2020

@g2vinay Thanks for the update. I tried adding the jackson-core dependency and still getting the same error in the above pom. I also tried updating the jackson-datatype-joda to 2.10.0 and still geting the same error. No clue on resolving the issue

Exception in thread "main" java.lang.NoClassDefFoundError: com/fasterxml/jackson/core/TSFBuilder at com.fasterxml.jackson.dataformat.xml.XmlMapper.<init>(XmlMapper.java:122) at com.azure.core.util.serializer.JacksonAdapter.<init>(JacksonAdapter.java:68) at com.azure.core.util.serializer.JacksonAdapter.createDefaultSerializerAdapter(JacksonAdapter.java:101) at com.azure.identity.implementation.IdentityClient.<clinit>(IdentityClient.java:89) at com.azure.identity.implementation.IdentityClientBuilder.build(IdentityClientBuilder.java:99) at com.azure.identity.ClientSecretCredential.<init>(ClientSecretCredential.java:50) at com.azure.identity.ClientSecretCredentialBuilder.build(ClientSecretCredentialBuilder.java:62) at com.concordfax.capture.core.azure.keyvault.AzureKeyVaultStore.getSecretClient(AzureKeyVaultStore.java:79) at com.concordfax.capture.core.azure.keyvault.AzureKeyVaultStore.queryKeyVaultSecrets(AzureKeyVaultStore.java:36) at com.auxolabs.cvision.pipeline.AzureKeyVaultStoreCore.main(AzureKeyVaultStoreCore.java:24) Caused by: java.lang.ClassNotFoundException: com.fasterxml.jackson.core.TSFBuilder at java.net.URLClassLoader.findClass(URLClassLoader.java:382) at java.lang.ClassLoader.loadClass(ClassLoader.java:424) at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:349) at java.lang.ClassLoader.loadClass(ClassLoader.java:357) ... 10 more

sudharsan2020 on 31 Aug 2020

@sudharsan2020

The code compiled fine with jackson-core version 2.10.0 on my end.

Further, can you try the following steps:

Clean up the local .m2 repository located in <Path-To-User-Diir>/.m2
Add the latest jackson-core dependency to the pom:

<dependency>
  <groupId>com.fasterxml.jackson.core</groupId>
  <artifactId>jackson-core</artifactId>
  <version>2.11.2</version>
</dependency>

Try running the application with this configuration to see if the issue is resolved.

Shading the package
If the above steps do not work out, then another approach is to use the shading route to shade jackson packages to avoid dependency conflicts:

Unzip the keyvaul shaded sample app attached.
The pom file of the sample app contains azure-security-keyvault-secrets & azure-identity dependencies and the maven shade plugin configuration required to shade the underlying jackson dependencies coming in. More dependencies can be added to this pom file.
run mvn clean install on the sample app’s pom file. This will install the shaded library in the local .m2 directory.
Remove any direct azure-security-keyvault-secrets, azure-identity SDK dependencies from your application's pom file.
Add the dependency of the newly installed keyvault shaded package and msal packailege separately in your application pom file:

        <dependency>
            <groupId>com.azure.shaded</groupId>
            <artifactId>keyvault-shaded</artifactId>
            <version>1.0-SNAPSHOT</version>
        </dependency>

        <dependency>
            <groupId>com.microsoft.azure</groupId>
            <artifactId>msal4j</artifactId>
            <version>1.6.1</version>
        </dependency>

Both of these strategies worked out fine on my end and resolved the conflict + code compiled fine.
keyvaultshaded.zip

g2vinay on 31 Aug 2020

@g2vinay You are awesome. Shading approach solves the case. Thanks alot for your fantastic support :+1: :100:

sudharsan2020 on 1 Sep 2020

👍1

Was this page helpful?

0 / 5 - 0 ratings

Related issues

Using mocks in unit tests

srnagar · 4Comments

[BUG] Memory leak in ServiceBusReceiverAsyncClient close

marciopd · 3Comments

[FEATURE REQ] Document which azure-identity dependencies are optional

knutwannheden · 4Comments

[BUG] Breaking changes in azure-spring-boot-starter-keyvault-secrets' configuration

frank-fischer-by · 3Comments

[BUG] getByResourceGroup throws an NPE when the resource is a Gallery, GalleryImage or GalleryImageVersion

Shanky2304 · 4Comments