Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

67 secure install #73

Merged
merged 1 commit into from
Dec 21, 2023
Merged

67 secure install #73

merged 1 commit into from
Dec 21, 2023

Conversation

georgit
Copy link
Contributor

@georgit georgit commented Dec 19, 2023

The goal of this PR is to allow Habushu to use maven username/password when pulling dependencies.

Currently, Habushu does not use user credentials when pulling dependencies and instead pulls them anonymously. This is leading to some issues for dependencies that require credentials. We would like to fix this. These credentials are in the settings.xml file in the .m2 directory.

Along the way, we found that the HabushuUtil file was missing the first level of indentation for all methods. After some though, we think the most likely reason for this is a copy/paste error and decided it was worth fixing. Maybe there is some convention of not indenting in a final class in Java, but we didn't think that likely.

password = HabushuUtil.findPasswordForServer(settings, pypiRepoId, decryptPassword);
}

if (StringUtils.isNotEmpty(pypiRepoUrl)) {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If the pypiRepoUrl is empty, should we log an error or throw and exception? Not sure what the best approach is here.

Copy link
Contributor

@aaron-gary aaron-gary left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left some minor comments

@georgit georgit merged commit eebb021 into dev Dec 21, 2023
1 check passed
@georgit georgit deleted the 67-secure-install branch December 21, 2023 23:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants