Duplicate manifest entries in shaded jar

[ftreede]

Describe the bug

The bundled jar bundle-federated-auth's manifest contains duplicate entries. It seems that it's just a concatenation of all the manifests of the jars shaded into it.

Expected Behavior

The bundle jar should have a valid manifest, containig only information for the bundle itself.

What plugins are used? What other connection properties were set?

n/a

Current Behavior

We're using the bundle-fedarated-auth shaded jar inside a keycloak deployment. At runtime, we get warnings about duplicate manifest entries:

Duplicate name in Manifest: Implementation-URL.
Ensure that the manifest does not have duplicate entries, and
that blank lines separate individual sections in both your
manifest and in the META-INF/MANIFEST.MF entry in the jar file.

It appears that the manifest of the bundle just contains all the manifests of the bundled jars, concatenated together:

MANIFEST.txt

Reproduction Steps

Download the jar from maven central. ie. https://search.maven.org/remotecontent?filepath=software/amazon/jdbc/aws-advanced-jdbc-wrapper/2.5.5/aws-advanced-jdbc-wrapper-2.5.5-bundle-federated-auth.jar

Possible Solution

No response

Additional Information/Context

No response

The AWS Advanced JDBC Driver version used

2.5.5

JDK version used

n/a

Operating System and version

n/a

[karenc-bq]

Hi @ftreede, thank you for raising this issue, we will take a look into this.

[aaron-congo]

Hi @ftreede, I've been spending some time looking into this issue, are the warnings you are seeing causing any problems or impeding you in any way? Please let me know, and thank you for your patience!

[ftreede]

As far as I can tell, it doesn't cause any issues beyond logging a warning. It does mean though that anything relying on reading the manifest will likely get wrong results.