Extension ID
com.castsoftware.JEE-MavenHttp
What's new ?
See JEE Maven Http Extractor 3.0 - Release Notes for more information.
Extension description
This extension provides the means to extract JAR based source code via http/https from a remote Maven repository as well from Maven repository on your file system (file://). This is similar in function to the Maven repository on your file system option that is provided "out of the box" in the CAST Delivery Manager Tool, along with an enhancement that combines the capabilities of the old Maven HTTP Extractor and of the legacy Maven Extractor on your file system.
In what situation should you install this extension?
This extension should be used when you want to extract JAR based source code that is stored in a remote Maven repository. For example, when your JEE application relies on JAR files and the initial extraction of this application in the CAST Delivery Manager Tool throws "missing library file" alerts, you can use this extension to extract the missing files from a remote Maven repository and resolve the alerts.
Technical information
- The extension does not contain a source code "discoverer" (to determine the type of source code project) and therefore relies on other discoverers that are already installed in the CAST Delivery Manager Tool or via other extensions to do so.
- This extractor supports remote Maven repository as well as Maven repository on your file system. The URL format must use the http/https/file protocol.
- If you need to extract data from a https repository, please ensure that you are using the extension with AIP Core ≥ 8.3.10.
Supported Maven releases
Maven release | Supported |
---|---|
3.x.x | |
2.x.x | |
1.x.x |
CAST AIP release | Supported |
---|---|
8.3.x where x ≥ 3 | |
8.2.x | |
8.1.x | |
8.0.x | |
7.3.x |
Download and installation instructions
This extension is shipped and installed (in a from scratch installation scenario and in an upgrade scenario) by default with CAST AIP ≥ 8.3.3 therefore there is no need to perform a manual download and installation as described below.
Please see:
- This extension contains a File extractor and you should take note of the specific instructions in the installation guide that explains how to package your source code with the CAST Delivery Manager Tool when you have an existing Version.
- The latest release status of this extension can be seen when downloading it from the CAST Extend server.
Extension interface
The following screen shots show the differences in the product when the extension is installed:
- A new sub-option will be added to the Automated extraction of required jar files option:
- The new sub-option is called Maven respository:
- The Package Configuration tab then offers the following interface to access your Maven repository:
Option | Explanation |
---|---|
1 | Enter the direct URL for your Maven repository using the http/https protocol |
2 | Tick the Credentials option if the Maven repository requires authenticated access, then configure: User name: Used to configure the user name that has sufficient privileges to access the Maven repository for packaging purposes. Password: Used to configure the password that corresponds to your User name configured above. Remember password: This option enables you to force the CAST Delivery Manager Tool to save the database access credentials you have entered above. Choosing an option or not has no impact on the extraction (i.e. the CAST Delivery Manager Tool can still access the required resources). However, if you are creating subsequent versions of the same schemas on the same server, you can choose to store the password (by storing you will not need to re-enter it). There are two save options:
|
3 | This option enables you to specify specific artifacts that you know need to be extracted in order to resolve a packaging alert. You can specify the artifact using:
Notes
|
4 | Select the Proxy option, if Maven http repository requires a proxy pass, then configure: Host: Used to configure the proxy hostname requires to access the Maven http repository Port: Used to configure the proxy port requires to access the Maven http repository. |
5 | Additional Maven Repository: This option enables configuring additional Maven repositories. Repository URL: Enter the direct URL for your additional Maven repository using the http/https/file protocol User name: Used to configure the user name that has sufficient privilages to access the Maven repository for packaging purposes Password: Used to configure the password that corresponds to your User name configured above. Each additional repository has individual configuration option for username and password. |
Packaging and extraction messages
The following messages may appear during the packaging action:
Message ID | Format | Message | Action |
---|---|---|---|
cast.dmt.engine.extractor.jee.maven.http.connectionFailed | ERROR | Connection failed for %URL%: %MESSAGE% | Check the connection URL. |
cast.dmt.engine.extractor.jee.maven.http.authenticationFailed | ERROR | Authentication failed: %MESSAGE% | Check the credentials are correct. |
cast.dmt.engine.extractor.jee.maven.http.artifactRetrievalFailed | ERROR | Technical error during the extraction of the artifact from %URL% failed: %MESSAGE% | Check the access to the repository. |
cast.dmt.engine.extractor.jee.maven.http.artifactMetadataRetrievalFailed | ERROR | Technical error during the extraction of the maven-metadata.xml file from %URL% failed: %MESSAGE% | Without the data required to identify the versions for this artifact, we can't determine a best version. Please contact CAST Technical Support and report a bug. |
cast.dmt.engine.extractor.jee.maven.http.versionMetadataRetrievalFailed | ERROR | Technical error during the extraction of the maven-metadata.xml file from %URL% failed: %MESSAGE% | Without the data required to identify the files for the SNAPSHOT, the artifact can't be extracted. Please contact CAST Technical Support and report a bug. |
cast.dmt.engine.extractor.jee.maven.http.pomReadContentError | ERROR | Technical error while reading the pom file for the artifact [%GROUP_ID%][%ARTIFACT_ID%][%VERSION%]: %MESSAGE% | If the relocation is defined, the jar file will not be extracted. Please contact CAST Technical Support and report a bug. |
cast.dmt.engine.extractor.jee.maven.http.artifactWithoutVersion | WARNING | No version has been provided for the artifact [%GROUP_ID%][%ARTIFACT_ID%]. | In the maven dependency, the version should be defined or inherited from the parent. Check the packaging of the source code. |
cast.dmt.engine.extractor.jee.maven.http.artifactWithVersionVariable | WARNING | Version has been provided with variable for the artifact [%GROUP_ID%][%ARTIFACT_ID%]. | The variable should be defined or inherited from the parent. Check the packaging of the source code. |
cast.dmt.engine.extractor.jee.maven.http.notSupportedArtifactWithRange | WARNING | The automated extraction of artifacts with range is not supported: artifact [%GROUP_ID%][%ARTIFACT_ID%][%VERSION%]. | Please contact CAST Technical Support and report a feature request. |
cast.dmt.engine.extractor.jee.maven.http.getArtifact | INFO | Start to retrieve the artifact [%GROUP_ID%][%ARTIFACT_ID%][%VERSION%] from the repository. | None. |
cast.dmt.engine.extractor.jee.maven.http.notFoundArtifact | INFO | The artifact %GROUP_ID% %ARTIFACT_ID% has not been found in the repository. | Check the configuration details and update if necessary. |
cast.dmt.engine.extractor.jee.maven.http.notFoundArtifactMetadata | INFO | The metadata for artifact %GROUP_ID% %ARTIFACT_ID% has not been found in the repository. | Check the configuration details and update if necessary. |
cast.dmt.engine.extractor.jee.maven.combined.invalidURL | ERROR | cast.dmt.engine.extractor.jee.maven.combined.invalidURL => %URL%=%MESSAGE% | Check the repository url provided. supported protocols: file://, http://, https:// |
Limitations
Parent POM files scanned
Parent POM files are scanned but a limit is added to the recursive extraction of the Maven dependent artifacts.
When packaging a J2EE Maven resource package, if a pom file has a parent, the parent file is scanned and we extract all JAR dependencies from first level.
Packaging Type <POM>
POM file with the packaging type as <POM> will not extract additional resources "JAR","War" and "Zip" files.
Extraction Limitations
Extraction levels are limited to:
- Two for dependent artifacts
- No limit for parent artifacts
The total number of artifacts extracted using additional levels is limited to ten times the number of remediation artifacts (extracted at the base level), the first two additional levels are not started if this number is greater than three times the number of remediation artifacts.
Avoid using JEE Maven Http Extractor ≥ 2.0.3 and <=2.0.5, as JAR dependencies are extracted recursively without limit, this could have a big impact on performance.