Package org.eclipse.aether.internal.impl.resolution

Class TrustedChecksumsArtifactResolverPostProcessor

java.lang.Object

org.eclipse.aether.internal.impl.resolution.ArtifactResolverPostProcessorSupport

org.eclipse.aether.internal.impl.resolution.TrustedChecksumsArtifactResolverPostProcessor

All Implemented Interfaces:

org.eclipse.aether.spi.resolution.ArtifactResolverPostProcessor

@Singleton
@Named("trustedChecksums")
public final class TrustedChecksumsArtifactResolverPostProcessor
extends ArtifactResolverPostProcessorSupport

Artifact resolver processor that verifies the checksums of all resolved artifacts against trusted checksums. Is also able to "record" (calculate and write them) to trusted checksum sources, that do support this operation.

It uses a list of ChecksumAlgorithmFactoryies to work with, by default SHA-1.

Configuration keys:

• aether.artifactResolver.postProcessor.trustedChecksums.checksumAlgorithms - Comma separated list of ChecksumAlgorithmFactory names to use (default "SHA-1").
• aether.artifactResolver.postProcessor.trustedChecksums.failIfMissing - To fail if artifact being validated is missing a trusted checksum (default false).
• aether.artifactResolver.postProcessor.trustedChecksums.snapshots - Should snapshot artifacts be handled (validated or recorded). Snapshots are by "best practice" in-house produced, hence should be trusted (default false).
• aether.artifactResolver.postProcessor.trustedChecksums.record - If this value set to true, this component with not validate but "record" encountered artifact checksums instead (default false).

This component uses TrustedChecksumsSource as source of checksums for validation and also to "record" the calculated checksums. To have this component usable, there must exist at least one enabled checksum source. In case of multiple checksum sources enabled, ALL of them are used as source for validation or recording. This implies that if two enabled checksum sources "disagree" about an artifact checksum, the validation failure is inevitable.

Since:

1.9.0

Field Summary

Fields

Modifier and Type	Field	Description
static final String	NAME

Constructor Summary

Constructors

Constructor	Description
TrustedChecksumsArtifactResolverPostProcessor(org.eclipse.aether.spi.connector.checksum.ChecksumAlgorithmFactorySelector checksumAlgorithmFactorySelector, Map<String,org.eclipse.aether.spi.checksums.TrustedChecksumsSource> trustedChecksumsSources)

Method Summary

Modifier and Type	Method	Description
protected void	doPostProcess(org.eclipse.aether.RepositorySystemSession session, List<org.eclipse.aether.resolution.ArtifactResult> artifactResults)

Methods inherited from class org.eclipse.aether.internal.impl.resolution.ArtifactResolverPostProcessorSupport

configPropKey, isEnabled, postProcess

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

NAME

public static final String NAME

See Also:

• Constant Field Values

Constructor Details

TrustedChecksumsArtifactResolverPostProcessor

@Inject
public TrustedChecksumsArtifactResolverPostProcessor(org.eclipse.aether.spi.connector.checksum.ChecksumAlgorithmFactorySelector checksumAlgorithmFactorySelector,
 Map<String,org.eclipse.aether.spi.checksums.TrustedChecksumsSource> trustedChecksumsSources)

Method Details

doPostProcess

protected void doPostProcess(org.eclipse.aether.RepositorySystemSession session,
 List<org.eclipse.aether.resolution.ArtifactResult> artifactResults)

Specified by:

doPostProcess in class ArtifactResolverPostProcessorSupport