Uploaded image for project: 'Maven Wagon'
  1. Maven Wagon
  2. WAGON-590

Maven 3.5.0+ doesn't seem to send credentials after 301/302 HTTP redirect



    • Bug
    • Status: Closed
    • Major
    • Resolution: Information Provided
    • 3.4.0
    • None
    • None
    • None


      Since maven 3.5.0 (including 3.6.3), maven seems to not send server credentials if distributionManagement server response was a 301 or 302 HTTP redirect. Note that the redirect is followed, but I receive unauthorised code.

      Maven 3.2.5 and 3.3.9 work as expected. I could reproduce it on ubuntu and OSX. Both are JDK 8, not sure if it could make any difference.


      All maven versions (including 3.2.5 and 3.3.9) are using the same version of the deploy plugin (2.7), and upgrading it made no difference whatsoever.

      If I use 'https://openmrs.jfrog.io/artifactory/snapshots/' as my 'distributionManagement', credentials are sent.

      If I use 'https://mavenrepo.openmrs.org/proxy/snapshots/' (a reverse proxy to 'https://openmrs.jfrog.io/artifactory/snapshots/') credentials are sent.

      If I use 'https://mavenrepo.openmrs.org/snapshots/' (a 301 redirect to https://openmrs.jfrog.io/artifactory/snapshots/) as my distributionManagement, credentials are not sent and the request fails as it's unauthenticated. 


      You can see the configuration of 'mavenrepo.openmrs.org' server here: https://github.com/openmrs/openmrs-contrib-itsmresources/blob/master/ansible/host_vars/campo.openmrs.org/vars#L33


      All my artefacts are public to download, so I don't have a way to testing downloading artefacts with server credentials.


      This is how the output looks like in maven 3.6.3:

      [INFO] --- maven-deploy-plugin:2.7:deploy (default-deploy) @ releasetestmodule ---
      Downloading from openmrs-repo-snapshots: https://mavenrepo.openmrs.org/nexus/content/repositories/snapshots/org/openmrs/module/releasetestmodule/2.1.22-SNAPSHOT/maven-metadata.xml
      Downloaded from openmrs-repo-snapshots: https://mavenrepo.openmrs.org/nexus/content/repositories/snapshots/org/openmrs/module/releasetestmodule/2.1.22-SNAPSHOT/maven-metadata.xml (616 B at 132 B/s)
      Uploading to openmrs-repo-snapshots: https://mavenrepo.openmrs.org/nexus/content/repositories/snapshots/org/openmrs/module/releasetestmodule/2.1.22-SNAPSHOT/releasetestmodule-2.1.22-20200427.091851-13.pom
      [ERROR] Failed to execute goal org.apache.maven.plugins:maven-deploy-plugin:2.7:deploy (default-deploy) on project releasetestmodule: Failed to deploy artifacts: Could not transfer artifact org.openmrs.module:releasetestmodule:pom:2.1.22-20200427.091851-13 from/to openmrs-repo-snapshots (https://mavenrepo.openmrs.org/nexus/content/repositories/snapshots): Transfer failed for https://openmrs.jfrog.io/artifactory/snapshots/org/openmrs/module/releasetestmodule/2.1.22-SNAPSHOT/releasetestmodule-2.1.22-20200427.091851-13.pom 401 Unauthorized -> [Help 1]


        1. Screen Shot 2020-04-28 at 7.45.33 pm.png
          88 kB
          Cintia DR
        2. maven_x.log
          27 kB
          Cintia DR
        3. master_osx.log
          74 kB
          Cintia DR
        4. mvn339_osx.log
          276 kB
          Cintia DR
        5. master_ubuntu.log
          122 kB
          Cintia DR
        6. mvn339_ubuntu.log
          282 kB
          Cintia DR
        7. mvn-wagon590branch-debug-osx.log
          15 kB
          Cintia DR
        8. mvn-wagon590branch-osx.log
          9 kB
          Cintia DR
        9. mvn-master-batch.log
          67 kB
          Cintia DR
        10. scoped-auth.log
          398 kB
          Michael Osipov
        11. any-auth.log
          562 kB
          Michael Osipov
        12. expect-continue-done-right-any-auth.log
          519 kB
          Michael Osipov
        13. 0001-conditonally-set-AuthScope-to-any.patch
          4 kB

        Issue Links



              michael-o Michael Osipov
              cintiadr Cintia DR
              0 Vote for this issue
              3 Start watching this issue