On this page:

What's new ?
Extension description
- In what situation should you install this extension?
- Technical information
Supported Maven releases
CAST AIP compatibility
Download and installation instructions
Extension interface
Packaging and extraction messages
Limitations

Target audience:

CAST Administrators

Summary: Information and Release Notes about the JEE Maven Http Extractor for the CAST Delivery Manager Tool. This extension is an automated library extractor.

What's new ?

See JEE Maven Http Extractor 2.0 - Release Notes for more information.

Extension description

This extension provides the means to extract JAR based source code via http/https from a remote Maven repository. In other words, JAR based source code that does not reside in a simple local or network folder. This extension is similar in function to the Maven repository on your file system option that is provided "out of the box" in the CAST Delivery Manager Tool.

In what situation should you install this extension?

This extension should be used when you want to extract JAR based source code that is stored in a remote Maven repository. For example, when your JEE application relies on JAR files and the initial extraction of this application in the CAST Delivery Manager Tool throws "missing library file" alerts, you can use this extension to extract the missing files from a remote Maven repository and resolve the alerts.

Technical information

The extension does not contain a source code "discoverer" (to determine the type of source code project) and therefore relies on other discoverers that are already installed in the CAST Delivery Manager Tool or via other extensions to do so.
This extractor supports only a remote Maven repository. The URL format must use the http/https protocol. If you have a local repository that can be accessed please use the Maven repository on your file system option in the CAST Delivery Manager Tool, which is provided "out of the box" in CAST AIP.
If you need to extract data from a https repository, please ensure that you are using the extension with AIP Core ≥ 8.3.10.

Supported Maven releases

Maven release	Supported
3.x.x
2.x.x
1.x.x

CAST AIP compatibility

This extension is compatible with:

CAST AIP release	Supported
8.3.x where x ≥ 3
8.2.x
8.1.x
8.0.x
7.3.x

Download and installation instructions

This extension is shipped and installed (in a from scratch installation scenario and in an upgrade scenario) by default with CAST AIP ≥ 8.3.3 therefore there is no need to perform a manual download and installation as described below.

Please see:

This extension contains a File extractor and you should take note of the specific instructions in the installation guide that explains how to package your source code with the CAST Delivery Manager Tool when you have an existing Version.
The latest release status of this extension can be seen when downloading it from the CAST Extend server.

Extension interface

The following screen shots show the differences in the product when the extension is installed:

A new sub-option will be added to the Automated extraction of required jar files option:

The new sub-option is called Maven Http respository:

The Package Configuration tab then offers the following interface to access your Maven repository:

Option

Explanation

1

Enter the direct URL for your Maven repository using the http/https protocol

2

Tick the Credentials option if the Maven repository requires authenticated access, then configure:

User name

Used to configure the user name that has sufficient privileges to access the Maven repository for packaging purposes.

Password

Used to configure the password that corresponds to your User name configured above.

Remember password

This option enables you to force the CAST Delivery Manager Tool to save the database access credentials you have entered above.

Choosing an option or not has no impact on the extraction (i.e. the CAST Delivery Manager Tool can still access the required resources). However, if you are creating subsequent Versions of the same schemas on the same server, you can choose to store the password in which case you will not need to re-enter it.

There are two save options:

Local > The credentials are saved in the user's local workspace on the current machine. Choose this option if you do not want the password to be available to other Delivery Managers.
Server > The credentials are saved locally (as above) and are also synchronized back to the CAST AIC Portal (i.e. the Source Code Delivery Folder). Choose this option if you want the password to be available to other Delivery Managers.

3

This option enables you to specify specific artifacts that you know need to be extracted in order to resolve a packaging alert. You can specify the artifact using:

Group ID (usually a reverse domain name like com.example.foo) - this option is mandatory
Artifact ID (usually the name) - this option is mandatory
Version (the artifact's version string) - this option is mandatory
Classifier (an arbitrary string that distinguishes artifacts that were built from the same POM but differ in their content) - this option is mandatory

Notes

If you do not specify an element, the CAST Delivery Manager Tool will automatically populate the list of elements when you run the Package action based on what it finds in the repository URL you have entered.
<groupID> or <artifactID> configured in <relocation> tags are supported.
maven-metadata.xml will be used to determine a best version for the <versionID> if no pom.xml can be found.

Packaging and extraction messages

The following messages may appear during the packaging action:

Message ID	Format	Message	Action
cast.dmt.engine.extractor.jee.maven.http.connectionFailed	ERROR	Connection failed for %URL%: %MESSAGE%	Check the connection URL.
cast.dmt.engine.extractor.jee.maven.http.authenticationFailed	ERROR	Authentication failed: %MESSAGE%	Check the credentials are correct.
cast.dmt.engine.extractor.jee.maven.http.artifactRetrievalFailed	ERROR	Technical error during the extraction of the artifact from %URL% failed: %MESSAGE%	Check the access to the repository.
cast.dmt.engine.extractor.jee.maven.http.artifactMetadataRetrievalFailed	ERROR	Technical error during the extraction of the maven-metadata.xml file from %URL% failed: %MESSAGE%	Without the data required to identify the versions for this artifact, we can't determine a best version. Please contact CAST Technical Support and report a bug.
cast.dmt.engine.extractor.jee.maven.http.versionMetadataRetrievalFailed	ERROR	Technical error during the extraction of the maven-metadata.xml file from %URL% failed: %MESSAGE%	Without the data required to identify the files for the SNAPSHOT, the artifact can't be extracted. Please contact CAST Technical Support and report a bug.
cast.dmt.engine.extractor.jee.maven.http.pomReadContentError	ERROR	Technical error while reading the pom file for the artifact [%GROUP_ID%][%ARTIFACT_ID%][%VERSION%]: %MESSAGE%	If the relocation is defined, the jar file will not be extracted. Please contact CAST Technical Support and report a bug.
cast.dmt.engine.extractor.jee.maven.http.artifactWithoutVersion	WARNING	No version has been provided for the artifact [%GROUP_ID%][%ARTIFACT_ID%].	In the maven dependency, the version should be defined or inherited from the parent. Check the packaging of the source code.
cast.dmt.engine.extractor.jee.maven.http.artifactWithVersionVariable	WARNING	Version has been provided with variable for the artifact [%GROUP_ID%][%ARTIFACT_ID%].	The variable should be defined or inherited from the parent. Check the packaging of the source code.
cast.dmt.engine.extractor.jee.maven.http.notSupportedArtifactWithRange	WARNING	The automated extraction of artifacts with range is not supported: artifact [%GROUP_ID%][%ARTIFACT_ID%][%VERSION%].	Please contact CAST Technical Support and report a feature request.
cast.dmt.engine.extractor.jee.maven.http.getArtifact	INFO	Start to retrieve the artifact [%GROUP_ID%][%ARTIFACT_ID%][%VERSION%] from the repository.	None.
cast.dmt.engine.extractor.jee.maven.http.notFoundArtifact	INFO	The artifact %GROUP_ID% %ARTIFACT_ID% has not been found in the repository.	Check the configuration details and update if necessary.
cast.dmt.engine.extractor.jee.maven.http.notFoundArtifactMetadata	INFO	The metadata for artifact %GROUP_ID% %ARTIFACT_ID% has not been found in the repository.	Check the configuration details and update if necessary.

Limitations

Parent POM files scanned

Parent POM files are scanned but a limit is added to the recursive extraction of the Maven dependent artifacts.

When packaging a J2EE Maven resource package, if a pom file has a parent, the parent file is scanned and we extract all JAR dependencies from first level.

Packaging Type <POM>

POM file with the packaging type as <POM> will not extract additional resources "JAR","War" and "Zip" files.

Extraction Limitations

Extraction levels are limited to:

Two for dependent artifacts
No limit for parent artifacts

The total number of artifacts extracted using additional levels is limited to ten times the number of remediation artifacts (extracted at the base level), the first two additional levels are not started if this number is greater than three times the number of remediation artifacts.

Avoid using JEE Maven Http Extractor ≥ 2.0.3 and <=2.0.5, as JAR dependencies are extracted recursively without limit, this could have a big impact on performance.