Merge branch 'jdk21'

# Conflicts:
#	webswing-directdraw/webswing-directdraw-javascript/package-lock.json

Author: manticore-projects

.github/workflow/Gradle.yml

@@ -0,0 +1,75 @@
+name: Build
+
+on:
+  push:
+    branches: [ master, develop ]
+  pull_request:
+    branches: [ master ]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build on JDK ${{ matrix.java }} / ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        java: [ '21', '25' ]
+        os: [ ubuntu-latest ]
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up JDK ${{ matrix.java }}
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: ${{ matrix.java }}
+
+      - name: Set up Xvfb
+        run: |
+          sudo apt-get update -qq
+          sudo apt-get install -y -qq xvfb
+          Xvfb :99 -screen 0 1024x768x24 &
+          echo "DISPLAY=:99" >> "$GITHUB_ENV"
+
+      - name: Cache Gradle packages
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+            ~/.gradle/nodejs
+          key: gradle-${{ runner.os }}-jdk${{ matrix.java }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties', '**/gradle.properties') }}
+          restore-keys: |
+            gradle-${{ runner.os }}-jdk${{ matrix.java }}-
+            gradle-${{ runner.os }}-
+
+      - name: Cache Node modules
+        uses: actions/cache@v4
+        with:
+          path: |
+            webswing-directdraw/webswing-directdraw-javascript/node_modules
+            webswing-server/webswing-server-frontend/node_modules
+          key: node-${{ runner.os }}-${{ hashFiles('**/package-lock.json', '**/package.json') }}
+          restore-keys: |
+            node-${{ runner.os }}-
+
+      - name: Grant execute permission
+        run: chmod +x gradlew
+
+      - name: Build
+        run: ./gradlew clean build --no-daemon --warning-mode all
+
+      - name: Upload distribution
+        if: matrix.java == '21' && github.event_name == 'push'
+        uses: actions/upload-artifact@v4
+        with:
+          name: webswing-distribution
+          path: webswing-assembly/dist/webswing-*-distribution.zip
+          retention-days: 14
+          if-no-files-found: warn

.gitignore

@@ -2,12 +2,15 @@
 # compiled source #
 ###################
 target/
+build/
+out/
 dist/
 bin/
 lib/
 logs/
 node/
 node_modules/
+.gradle/
 .settings/
 .project
 .classpath

README.md

@@ -1,30 +1,229 @@
-![logo2.png](https://bitbucket.org/repo/ypeqyM/images/2077889959-logo2.png)
+<div align="center">
 
-**Webswing** is a web server that allows you to run any Java swing application inside your web browser using only pure HTML5.
+# WebSwing Lite
 
-The best days of swing framework are gone. Desktop applications lost popularity and everything is forced to be online and mobile. But what about existing application? Using applet technology proved to be insecure, and rewriting the application to web is too expensive. This is where Webswing can help you. With Webswing, your application is securely running on a server and a user's browser only displays the application window. All this without changing a single line of source code.
+### Enterprise Java Swing Applications — Delivered Through Your Browser
 
-## Attribution
+[![Build](https://github.com/manticore-projects/webswing/actions/workflows/Gradle.yml/badge.svg)](https://github.com/manticore-projects/webswing/actions/workflows/Gradle.yml)
+[![Version](https://img.shields.io/badge/Version-26.0-orange?style=for-the-badge)](https://github.com/manticore-projects/webswing/releases)
+[![JDK 13+](https://img.shields.io/badge/JDK-13%2B%20%7C%2021%20%7C%2025%20%7C%2026-blue?style=for-the-badge&logo=openjdk&logoColor=white)](https://openjdk.org/)
+[![Node.js 24](https://img.shields.io/badge/Node.js-24%20LTS-339933?style=for-the-badge&logo=nodedotjs&logoColor=white)](https://nodejs.org/)
+[![License: AGPL v3](https://img.shields.io/badge/License-AGPL%20v3-red?style=for-the-badge)](https://www.gnu.org/licenses/agpl-3.0)
+[![Build](https://img.shields.io/badge/Build-Gradle%20%7C%20Maven-02303A?style=for-the-badge&logo=gradle&logoColor=white)](https://gradle.org/)
+[![GitHub](https://img.shields.io/github/stars/manticore-projects/webswing?style=for-the-badge&logo=github)](https://github.com/manticore-projects/webswing)
+
+<br/>
+
+*Run any Java Swing application inside a modern web browser — pure HTML5, zero plugins, zero client-side installation.*
+
+<br/>
+
+[Getting Started](#-getting-started) · [Build](#-build-instructions) · [What's New](#-whats-new) · [Architecture](#-architecture) · [Commercial Edition](#-commercial-edition)
+
+---
+
+</div>
+
+## Overview
+
+**WebSwing Lite** is a modernized, open-source edition of [WebSwing](https://www.webswing.org) — the web server that renders Java Swing applications in HTML5 Canvas and delivers them to any browser via WebSocket.
+
+This edition is based on the **last open-source release (v20.2.5)** of WebSwing, updated and maintained by [Manticore Projects](https://github.com/manticore-projects) with a focus on **modern JDK compatibility**, **security**, and **build toolchain modernization**.
+
+> **Looking for the full-featured commercial edition?**
+> WebSwing Lite does not include advanced capabilities such as cluster session pooling, load balancing, recording/playback, advanced admin console, and commercial support.
+> For production deployments at scale, we encourage you to explore the [**Commercial Edition at webswing.org**](https://www.webswing.org) →
+
+---
+
+## ✦ What's New
+
+### JDK Compatibility
+
+| JDK | Status | Notes |
+|:---:|:------:|:------|
+| 13–17 | 🔶 Should work | Untested — community feedback welcome |
+| 21 (LTS) | ✅ Fully supported | Primary target |
+| 23 | ✅ Supported | Short-term release |
+| 25 (LTS) | ✅ Supported | Current LTS |
+| 26 | ✅ Supported | Requires `--sun-misc-unsafe-memory-access=allow` |
+
+All internal APIs adapted for the post-JDK-11 module system — no `--illegal-access=permit`, no `-noverify` required.
+
+### Build & Runtime Modernization
+
+- **Node.js 24 LTS** — migrated from Node 10; Webpack 5, TypeScript 5, Dart Sass
+- **Gradle build system** — fast, incremental builds alongside the existing Maven build (Maven will be phased out in a future release)
+- **All dependencies updated** — Jackson, Guava, Log4j2, SLF4J 2.0, Bouncy Castle, Apache Commons, Protocol Buffers, and more
+- **Modernized start/stop script** — `bash` strict mode, graceful shutdown with timeout, Xvfb lifecycle management, clean log rotation
+
+### Performance
+
+- **SSE/AVX-optimized PNG encoding** via [fpng-java](https://github.com/nicob/fpng-java) — hardware-accelerated image compression in the DirectDraw rendering pipeline
+- **Browser-side font rendering** — text is rendered as font names + coordinates instead of server-side glyph bitmaps, reducing WebSocket bandwidth by up to 80%
+
+### Security
+
+- **Apache Shiro integration** — pluggable authentication and authorization supporting Active Directory / LDAP, JDBC realms, and custom providers
+- **TLS/SSL** — full HTTPS and WSS support with configurable keystores and truststores
+
+### Roadmap
+
+- Migration to **Jetty 12** (EE8 environment for `javax.servlet` compatibility)
+- Migration to **Apache HttpClient 5** replacing the legacy 4.x client
+- `PlatformGraphicsInfo` module patch integrated into the build system (replacing the runtime `Unsafe` workaround)
+
+---
+
+## 🚀 Getting Started
+
+### Prerequisites
+
+| Component | Version |
+|-----------|---------|
+| JDK | 13 or later (21+ recommended; [Eclipse Temurin](https://adoptium.net/)) |
+| Xvfb | Required on headless Linux servers |
 
-In case you are using Webswing to deliver your product **give a credit and a create link on your page to webswing.org!**
+### Quick Start
 
-## Contribution
+```bash
+# Download the latest release
+curl -LO https://github.com/manticore-projects/webswing/releases/latest/download/webswing-26.0-distribution.zip
+unzip webswing-26.0-distribution.zip
+cd webswing-26.0
 
-If you want to contribute to Webswing, be sure to review the [contribution guidelines](http://webswing.org/docs/version-2.5/contrib/).
-We use [bitbucket issues](https://bitbucket.org/meszarv/webswing/issues) for tracking requests and bugs.
+# Start the server
+./run.sh start
 
-## Links
+# Open in your browser
+open http://localhost:8080
+```
 
-[Webswing Website](https://www.webswing.org)
+### Management
 
-[Documentation](https://webswing.org/docs/)
+```bash
+./run.sh start      # Start the server (background, with log tailing)
+./run.sh stop       # Graceful shutdown (30s timeout, then SIGKILL)
+./run.sh restart    # Stop + Start
+./run.sh status     # Check if the server is running
+```
 
-[Downloads](https://www.webswing.org/downloads)
+---
 
-[Webswing Promo Video - Youtube](https://youtu.be/IpYlyCRZcxc)
+## 🔨 Build Instructions
 
-[Webswing Quickstart Guide Video - Youtube](https://youtu.be/TKFJEfBBpKI)
+### Prerequisites
+
+| Tool   | Version |
+|--------|---------|
+| JDK    | 21+     |
+| Gradle | 8.12    |
+| Git    | 2.x     |
+
+> Node.js and npm are **automatically downloaded** during the build — no manual installation needed.
+
+### Build with Gradle
+
+```bash
+# Clone the repository
+git clone https://github.com/manticore-projects/webswing.git
+cd webswing
+
+# Full build
+./gradlew clean build
+
+# Build specific modules
+./gradlew :webswing-directdraw:webswing-directdraw-javascript:build
+./gradlew :webswing-server:webswing-server-frontend:build
+```
+
+### Deploy
+
+```bash
+# Extract to your deployment directory
+unzip webswing-assembly/dist/webswing-26.0-distribution.zip -d /opt/webswing
+
+# Configure your Swing application in webswing.config
+vim /opt/webswing/webswing.config
+
+# Start
+cd /opt/webswing && ./run.sh start
+```
+
+---
+
+## 🏗 Architecture
+
+```
+┌─────────────────────────────────────────────────────────────┐
+│                        Browser                              │
+│  ┌───────────────────────────────────────────────────────┐  │
+│  │  HTML5 Canvas  ◄──── WebSocket ────►  Event Capture   │  │
+│  └───────────────────────────────────────────────────────┘  │
+└─────────────────────────────────┬───────────────────────────┘
+                                  │
+                    ┌─────────────▼─────────────┐
+                    │     WebSwing Server        │
+                    │    (Jetty 9 / Servlet)     │
+                    │                            │
+                    │  ┌──────────────────────┐  │
+                    │  │  Session Manager     │  │
+                    │  │  Security (Shiro)    │  │
+                    │  │  WebSocket Handler   │  │
+                    │  └──────────┬───────────┘  │
+                    └─────────────┼──────────────┘
+                                  │ spawns
+                    ┌─────────────▼─────────────┐
+                    │     Child JVM Process      │
+                    │                            │
+                    │  ┌──────────────────────┐  │
+                    │  │  WebToolkit (AWT)    │  │
+                    │  │  DirectDraw Pipeline │  │
+                    │  │  Font Renderer       │  │
+                    │  │  ──────────────────  │  │
+                    │  │  Your Swing App      │  │
+                    │  └──────────────────────┘  │
+                    └────────────────────────────┘
+```
+
+**How it works:** The server intercepts Java2D `Graphics2D` paint operations in the child JVM, serializes them via Protocol Buffers, and streams them over WebSocket to the browser. The browser's JavaScript engine deserializes and replays the draw commands on an HTML5 Canvas. User input (mouse, keyboard) flows back over the same WebSocket.
+
+---
+
+## 📦 Dependency Overview
+
+| Component | Version | Purpose |
+|-----------|---------|---------|
+| Jetty | 9.4.58 | Embedded HTTP/WebSocket server |
+| Jackson | 2.19.0 | JSON serialization |
+| Protocol Buffers | 3.25.5 | Binary wire format (DirectDraw) |
+| Apache Shiro | 1.13.0 | Authentication & authorization |
+| Guava | 33.5.0 | Core utilities |
+| Log4j 2 | 2.25.3 | Logging framework |
+| SLF4J | 2.0.17 | Logging facade |
+| Bouncy Castle | 1.80 | Cryptography |
+| Webpack | 5.x | JavaScript bundling |
+| TypeScript | 5.x | Type-safe frontend code |
+
+
+---
+
+## Attribution
+
+This project is based on [WebSwing](https://www.webswing.org) v20.2.5, the last open-source release under the AGPL v3 license. All credit for the original WebSwing architecture and implementation goes to the WebSwing team.
+
+If you use WebSwing Lite to deliver your product, **please provide attribution and a link to [webswing.org](https://www.webswing.org).**
 
 ## License
 
-[GNU Affero General Public License](https://www.gnu.org/licenses/agpl-3.0.en.html)
+This project is licensed under the [GNU Affero General Public License v3.0](https://www.gnu.org/licenses/agpl-3.0.en.html).
+
+---
+
+<div align="center">
+
+**Maintained by [Manticore Projects](https://github.com/manticore-projects)**
+
+*Building enterprise financial software for banks and insurances since 2014.*
+
+</div>