Package org.eclipse.aether.transport.jetty

Class JettyTransporterConfigurationKeys

java.lang.Object

org.eclipse.aether.transport.jetty.JettyTransporterConfigurationKeys

public final class JettyTransporterConfigurationKeys
extends Object

Configuration for Jetty Transport.

Since:

2.0.1

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CONFIG_PROP_FOLLOW_INSECURE_REDIRECTS	If enabled, Jetty client will follow redirects that downgrade the protocol from https to http.
static final String	CONFIG_PROP_FOLLOW_REDIRECTS	If enabled, Jetty client will follow HTTP redirects.
static final String	CONFIG_PROP_MAX_REDIRECTS	The max redirect count to follow.
static final String	CONFIG_PROP_ORIGIN_SCOPED_HEADERS	If enabled (default), operator-configured request headers (aether.transport.http.headers) and preemptively applied Authorization are only sent on requests targeting the repository origin (the scheme, host and port the repository URL denotes).
static final boolean	DEFAULT_FOLLOW_INSECURE_REDIRECTS
static final boolean	DEFAULT_FOLLOW_REDIRECTS
static final int	DEFAULT_MAX_REDIRECTS
static final boolean	DEFAULT_ORIGIN_SCOPED_HEADERS

Method Summary

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

CONFIG_PROP_FOLLOW_REDIRECTS

public static final String CONFIG_PROP_FOLLOW_REDIRECTS

If enabled, Jetty client will follow HTTP redirects.

See Also:

• Constant Field Values

Sourced from:

RepositorySystemSession.getConfigProperties()

Value type:

Boolean

Default value:

DEFAULT_FOLLOW_REDIRECTS

Supports Repo ID Suffix:

Yes

DEFAULT_FOLLOW_REDIRECTS

public static final boolean DEFAULT_FOLLOW_REDIRECTS

See Also:

• Constant Field Values

CONFIG_PROP_MAX_REDIRECTS

public static final String CONFIG_PROP_MAX_REDIRECTS

The max redirect count to follow.

See Also:

• Constant Field Values

Sourced from:

RepositorySystemSession.getConfigProperties()

Value type:

Integer

Default value:

DEFAULT_MAX_REDIRECTS

Supports Repo ID Suffix:

Yes

DEFAULT_MAX_REDIRECTS

public static final int DEFAULT_MAX_REDIRECTS

See Also:

• Constant Field Values

CONFIG_PROP_FOLLOW_INSECURE_REDIRECTS

public static final String CONFIG_PROP_FOLLOW_INSECURE_REDIRECTS

If enabled, Jetty client will follow redirects that downgrade the protocol from https to http. Disabled by default: such a downgrade strips transport encryption from artifact and checksum bytes and makes repository credentials eligible for transmission over plaintext, so a downgrading redirect fails the transfer instead.

Since:

2.0.23

See Also:

• Constant Field Values

Sourced from:

RepositorySystemSession.getConfigProperties()

Value type:

Boolean

Default value:

DEFAULT_FOLLOW_INSECURE_REDIRECTS

Supports Repo ID Suffix:

Yes

DEFAULT_FOLLOW_INSECURE_REDIRECTS

public static final boolean DEFAULT_FOLLOW_INSECURE_REDIRECTS

See Also:

• Constant Field Values

CONFIG_PROP_ORIGIN_SCOPED_HEADERS

public static final String CONFIG_PROP_ORIGIN_SCOPED_HEADERS

If enabled (default), operator-configured request headers (aether.transport.http.headers) and preemptively applied Authorization are only sent on requests targeting the repository origin (the scheme, host and port the repository URL denotes). Jetty's redirector copies the request headers onto every redirect hop it follows, so without origin scoping a cross-origin redirect replays the configured headers - which frequently carry credentials such as Authorization or private token headers - to the redirect target host. Disable only when a redirect target legitimately requires the configured headers.

Since:

2.0.23

See Also:

• Constant Field Values

Sourced from:

RepositorySystemSession.getConfigProperties()

Value type:

Boolean

Default value:

DEFAULT_ORIGIN_SCOPED_HEADERS

Supports Repo ID Suffix:

Yes

DEFAULT_ORIGIN_SCOPED_HEADERS

public static final boolean DEFAULT_ORIGIN_SCOPED_HEADERS

See Also:

• Constant Field Values