build: migrate Maven deps off jenkins/maven.jans.io to Central + Packages (offboarding B3) by mo-auto · Pull Request #14212 · JanssenProject/jans (original) (raw)
added 2 commits
Repoint every pom's off maven.jans.io, maven.gluu.org and jenkins.jans.io to GitHub Packages Maven (for io.jans:*) plus Maven Central. Standalone sample/plugin poms that only referenced the old repos now declare the GitHub Packages repo explicitly.
Switch io.jans:jython-standalone:2.7.4 to the canonical org.python:jython-standalone:2.7.4 (Maven Central) in jans-bom and the four modules that use it. richfaces (gluu fork) is only dependency-managed and never resolved, so it needs no new home.
Signed-off-by: moauto 54212639+mo-auto@users.noreply.github.com
com.lochbridge.oath:{oath-parent,oath-otp,oath-otp-keyprovisioning}:0.0.1-SNAPSHOT is a gluu fork with no Maven Central release. Add a workflow_dispatch job that downloads it from maven.jans.io and deploys it to GitHub Packages Maven via maven-deploy-plugin:deploy-file, so the poms can drop the maven.jans.io repository. Run it (while maven.jans.io is alive) before merging the pom repoint.
Signed-off-by: moauto 54212639+mo-auto@users.noreply.github.com
Issue or changes required in automatic builds or CI infrastructure
label
[![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4)
… (casa)
lochbridge (com.lochbridge.oath:oath-otp, a gluu SNAPSHOT fork with no Maven Central release) is replaced by com.github.bastiaanjansen:otp-java (RFC 4226 HOTP + RFC 6238 TOTP) from Maven Central, so it no longer needs mirroring; the oath mirror workflow is removed.
- swap the dependency in jans-auth-server/server, jans-casa/app, jans-casa/app-fips
- rewrite casa HOTPAlgorithmService / TOTPAlgorithmService to otp-java, preserving behavior: base64url secret storage with base32 otpauth URIs, and HOTP look-ahead validation that returns the matched counter
- add a local OTPType enum (otp-java has no equivalent), used by OTPService, OTPViewModel, OTPEnrollingWS
Follow-up in this PR: migrate the OTP person-auth Jython scripts. Needs OTP enrollment + authentication testing before merge.
Signed-off-by: moauto 54212639+mo-auto@users.noreply.github.com
… (casa)
Swap the dependency in jans-auth-server/server, jans-casa/app and jans-casa/app-fips, and rewrite casa HOTPAlgorithmService / TOTPAlgorithmService to the otp-java API (RFC 4226 HOTP + RFC 6238 TOTP, on Maven Central). Behavior preserved: base64url secret storage with base32 otpauth URIs, and HOTP look-ahead validation returning the matched counter. Adds a local OTPType enum (otp-java has none) used by OTPService, OTPViewModel and OTPEnrollingWS. Needs OTP enrollment/auth testing.
Signed-off-by: moauto 54212639+mo-auto@users.noreply.github.com
Wrap getURI() in a broad catch so the casa OTP services compile whether or not the otp-java API declares URISyntaxException on getURI.
Signed-off-by: moauto 54212639+mo-auto@users.noreply.github.com
build: repoint pom repositories to GitHub Packages + Central (offboarding B3) build: migrate Maven deps off jenkins/maven.jans.io to Central + Packages (offboarding B3)
Update both OTP person-authentication Jython scripts and the OTP README from com.lochbridge.oath to com.github.bastiaanjansen.otp, matching the casa/auth-server dependency swap. HOTP look-ahead validation iterates counters to recover the matched moving factor; TOTP configures the generator via a Consumer that Jython coerces from a function.
The all-script.json config-api test fixture still embeds the old sample script text; left as-is (non-executed fixture).
Signed-off-by: moauto 54212639+mo-auto@users.noreply.github.com
[
[
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.Learn more about bidirectional Unicode characters
[ Show hidden characters]({{ revealButtonHref }})