RE: Re: Custom auth plugin/extension - how to?

2024-06-11 Thread David Grieve
A “maven-rfc” repo is a good idea if the issue of governance can be worked out. There will be a good deal of overhead related to maintaining, gatekeeping, and administration of such a repository. If RFC’s were just specs with problem statements, decision records that might be easier. An RFC shou

Re: Custom auth plugin/extension - how to?

2024-06-05 Thread Tamás Cservenák
Asf wiki is not the best place for brainstorming, as is usable only for people w asf accounts (i guess). What if we create a repo like "maven-rfc", where anyone can raise PRs (new functionality, change requests or just ideas), these would be like "proposals", that we discuss and modify specs w PRs

Re: Custom auth plugin/extension - how to?

2024-06-05 Thread Tamás Cservenák
Howdy, Bernd, I would be very interested to collect some ideas to solve exactly this problem... When I revamped maven-gpg-plugin re "worst practices", I started tinkering about this... Created page just to gather ideas... https://cwiki.apache.org/confluence/display/MAVEN/Handling+sensitive+data+i

Re: Custom auth plugin/extension - how to?

2024-06-05 Thread Bernd Eckenfels
BTW Speaking of “custom”, I would be very interested in a token based authentication, at least for read access to our repository server and mirror, we currently ship a static read-only login, and also we don’t want to allow putting their write (LDAP Login) credentials into files. If the maven ecos

Re: [EXTERNAL] Re: Re: Custom auth plugin/extension - how to?

2024-06-05 Thread David Grieve
Thanks again, Tamás. It is comforting to know that my implementation was not far off. From: Tamás Cservenák Date: Wednesday, June 5, 2024 at 3:38 AM To: Maven Users List Subject: [EXTERNAL] Re: Re: Custom auth plugin/extension - how to? [You don't often get email from ta...@cservena

Re: Re: Custom auth plugin/extension - how to?

2024-06-05 Thread Tamás Cservenák
Howdy, I'd do it as this: https://gist.github.com/cstamas/5c787875fc3196dbd200e3bd24692c98 Facts: - make priority higher than than of HTTP - this makes sure your transport will be always asked before Http one - just delegate/reuse http transport, no need to reimplement anything (make it also a JS

RE: Re: Custom auth plugin/extension - how to?

2024-06-04 Thread David Grieve
Thank you for the hint, Tamás. The problem I’m trying to solve is that I want a custom Authentication for a particular server. I do not want to re-implement HttpTransporter. Here are the important bits of what I’ve come up with. -- public class MyTransporterFactor

Re: Custom auth plugin/extension - how to?

2024-06-03 Thread Tamás Cservenák
Howdy, What are you trying to do? You may go better if you implement custom (resolver) transport maybe? Thanks T On Mon, Jun 3, 2024, 22:22 David Grieve wrote: > My questions are: Is this doable and, if so, how would one go about it? > > I’m trying to cobble together a plugin/extension that wi

Custom auth plugin/extension - how to?

2024-06-03 Thread David Grieve
My questions are: Is this doable and, if so, how would one go about it? I’m trying to cobble together a plugin/extension that will either get an auth token for resolving an artifact before the artifact is resolved, or will get an auth token if the resolution returns a 401. The plugin route happe