mirror of
https://github.com/jenkinsci/jenkins.git
synced 2026-11-14 12:32:15 +00:00
Kohsuke Kawaguchi
b2a98f6bc6
Previously, basic auth header was processed from two different servlet filters in a single filter chain. In case the 1st filter (ApiTokenFilter) manages to authenticate the request, the 2nd filter (BasicProcessingFilter) tries to avoid interpreting the API token as the password and failing authentication (see BasicProcessingFilter.authenticationIsRequired), but the check feels rather fragile. Although I did eventually discover that the original problem (ZD-19640) was not caused by this, I've already implemented & tested this change, and this feels like a good work to be wasted, so I'm pushing this in anyway. Refrence: ZD-19640
355 lines
12 KiB
XML
355 lines
12 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
||
<!--
|
||
The MIT License
|
||
|
||
Copyright (c) 2004-2009, Sun Microsystems, Inc., Kohsuke Kawaguchi
|
||
|
||
Permission is hereby granted, free of charge, to any person obtaining a copy
|
||
of this software and associated documentation files (the "Software"), to deal
|
||
in the Software without restriction, including without limitation the rights
|
||
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||
copies of the Software, and to permit persons to whom the Software is
|
||
furnished to do so, subject to the following conditions:
|
||
|
||
The above copyright notice and this permission notice shall be included in
|
||
all copies or substantial portions of the Software.
|
||
|
||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
||
THE SOFTWARE.
|
||
-->
|
||
|
||
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
|
||
<modelVersion>4.0.0</modelVersion>
|
||
|
||
<parent>
|
||
<artifactId>pom</artifactId>
|
||
<groupId>org.jenkins-ci.main</groupId>
|
||
<version>1.576-SNAPSHOT</version>
|
||
</parent>
|
||
<groupId>org.jenkins-ci.main</groupId>
|
||
<artifactId>jenkins-test-harness</artifactId>
|
||
|
||
<name>Test harness for Jenkins and plugins</name>
|
||
<description>
|
||
Unit test harness (src/main) and Unit tests for Jenkins core (src/test)
|
||
</description>
|
||
|
||
<properties>
|
||
<concurrency>2</concurrency> <!-- may use e.g. 2C for 2 × (number of cores) -->
|
||
<mavenDebug>false</mavenDebug>
|
||
<ignore.random.failures>false</ignore.random.failures>
|
||
<jacocoSurefireArgs></jacocoSurefireArgs><!-- empty by default -->
|
||
</properties>
|
||
|
||
<dependencies>
|
||
<dependency>
|
||
<!--
|
||
put hudson.war in the classpath. we can't pull in the war artifact directly
|
||
because Maven excludes all wars from classpath automatically. so we need a jar artifact.
|
||
-->
|
||
<groupId>${project.groupId}</groupId>
|
||
<artifactId>jenkins-war</artifactId>
|
||
<version>${project.version}</version>
|
||
<classifier>war-for-test</classifier>
|
||
<exclusions>
|
||
<exclusion>
|
||
<groupId>org.jenkins-ci.modules</groupId>
|
||
<artifactId>sshd</artifactId>
|
||
</exclusion>
|
||
</exclusions>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>${project.groupId}</groupId>
|
||
<artifactId>maven-plugin</artifactId>
|
||
<version>${maven-plugin.version}</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jenkins-ci.plugins</groupId>
|
||
<artifactId>ant</artifactId>
|
||
<version>1.2</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jenkins-ci.plugins</groupId>
|
||
<artifactId>subversion</artifactId>
|
||
<version>1.45</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jenkins-ci.plugins</groupId>
|
||
<artifactId>mailer</artifactId>
|
||
<version>1.8</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jenkins-ci.plugins</groupId>
|
||
<artifactId>matrix-auth</artifactId>
|
||
<version>1.0.2</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jenkins-ci.plugins</groupId>
|
||
<artifactId>antisamy-markup-formatter</artifactId>
|
||
<version>1.0</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jenkins-ci.plugins</groupId>
|
||
<artifactId>matrix-project</artifactId>
|
||
<version>1.0-beta-1</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.mortbay.jetty</groupId>
|
||
<artifactId>jetty</artifactId>
|
||
<version>6.1.26</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jenkins-ci</groupId>
|
||
<artifactId>test-annotations</artifactId>
|
||
<version>1.1</version>
|
||
<scope>compile</scope>
|
||
<!-- in this module we need this as a compile scope, whereas in the parent it's test -->
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jvnet.mock-javamail</groupId>
|
||
<artifactId>mock-javamail</artifactId>
|
||
<version>1.7</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>junit</groupId>
|
||
<artifactId>junit</artifactId>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.hamcrest</groupId>
|
||
<artifactId>hamcrest-library</artifactId>
|
||
<version>1.3</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.jenkins-ci</groupId>
|
||
<artifactId>htmlunit</artifactId>
|
||
<version>2.6-jenkins-6</version>
|
||
<exclusions>
|
||
<exclusion>
|
||
<!-- hides JDK DOM classes in Eclipse -->
|
||
<groupId>xml-apis</groupId>
|
||
<artifactId>xml-apis</artifactId>
|
||
</exclusion>
|
||
</exclusions>
|
||
</dependency>
|
||
<dependency><!-- we exclude this transient dependency from htmlunit, which we actually need in the test -->
|
||
<groupId>xalan</groupId>
|
||
<artifactId>xalan</artifactId>
|
||
<version>2.7.1</version>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.jvnet.hudson</groupId>
|
||
<artifactId>embedded-rhino-debugger</artifactId>
|
||
<version>1.2</version>
|
||
</dependency>
|
||
<dependency>
|
||
<!-- for testing JNLP launch. -->
|
||
<groupId>org.jvnet.hudson</groupId>
|
||
<artifactId>netx</artifactId>
|
||
<version>0.5-hudson-2</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.easymock</groupId>
|
||
<artifactId>easymock</artifactId>
|
||
<version>2.4</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.mockito</groupId>
|
||
<artifactId>mockito-core</artifactId>
|
||
<scope>test</scope>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.netbeans.modules</groupId>
|
||
<artifactId>org-netbeans-insane</artifactId>
|
||
<version>RELEASE72</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>com.github.stephenc.findbugs</groupId>
|
||
<artifactId>findbugs-annotations</artifactId>
|
||
<version>1.3.9-1</version>
|
||
</dependency>
|
||
<dependency>
|
||
<groupId>org.codehaus.geb</groupId>
|
||
<artifactId>geb-implicit-assertions</artifactId>
|
||
<version>0.7.2</version>
|
||
</dependency>
|
||
</dependencies>
|
||
|
||
<build>
|
||
<plugins>
|
||
<plugin>
|
||
<groupId>org.kohsuke.stapler</groupId>
|
||
<artifactId>maven-stapler-plugin</artifactId>
|
||
<!-- version specified in grandparent pom -->
|
||
<extensions>true</extensions>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.apache.maven.plugins</groupId>
|
||
<artifactId>maven-surefire-plugin</artifactId>
|
||
<!-- version specified in grandparent pom -->
|
||
<configuration>
|
||
<argLine>${jacocoSurefireArgs} -Dfile.encoding=UTF-8 -Xmx256m -XX:MaxPermSize=128m</argLine>
|
||
<systemPropertyVariables>
|
||
<!-- use AntClassLoader that supports predictable file handle release -->
|
||
<hudson.ClassicPluginStrategy.useAntClassLoader>true</hudson.ClassicPluginStrategy.useAntClassLoader>
|
||
<hudson.maven.debug>${mavenDebug}</hudson.maven.debug>
|
||
<buildDirectory>${project.build.directory}</buildDirectory>
|
||
<ignore.random.failures>${ignore.random.failures}</ignore.random.failures>
|
||
</systemPropertyVariables>
|
||
<reuseForks>true</reuseForks>
|
||
<forkCount>${concurrency}</forkCount>
|
||
</configuration>
|
||
</plugin>
|
||
<plugin>
|
||
<groupId>org.codehaus.gmaven</groupId>
|
||
<artifactId>gmaven-plugin</artifactId>
|
||
<!-- version specified in grandparent pom -->
|
||
<executions>
|
||
<execution>
|
||
<id>default</id>
|
||
<!-- compile and process annotations in Groovy test code -->
|
||
<goals>
|
||
<goal>generateTestStubs</goal>
|
||
<goal>testCompile</goal>
|
||
</goals>
|
||
</execution>
|
||
<execution>
|
||
<id>preset-packager</id>
|
||
<phase>process-resources</phase>
|
||
<goals>
|
||
<goal>execute</goal>
|
||
</goals>
|
||
<configuration>
|
||
<source>${pom.basedir}/src/main/preset-data/package.groovy</source>
|
||
</configuration>
|
||
</execution>
|
||
</executions>
|
||
<dependencies>
|
||
<dependency>
|
||
<groupId>org.apache.ant</groupId>
|
||
<artifactId>ant</artifactId>
|
||
<version>1.8.0</version>
|
||
</dependency>
|
||
<!-- Usually a dependency of ant, but some people seem to have an incomplete ant POM. See JENKINS-11416 -->
|
||
<dependency>
|
||
<groupId>org.apache.ant</groupId>
|
||
<artifactId>ant-launcher</artifactId>
|
||
<version>1.8.0</version>
|
||
</dependency>
|
||
|
||
<dependency>
|
||
<groupId>org.codehaus.gmaven.runtime</groupId>
|
||
<artifactId>gmaven-runtime-2.0</artifactId>
|
||
<version>1.5-jenkins-1</version>
|
||
</dependency>
|
||
</dependencies>
|
||
<configuration>
|
||
<providerSelection>2.0</providerSelection>
|
||
</configuration>
|
||
</plugin>
|
||
</plugins>
|
||
</build>
|
||
|
||
<profiles>
|
||
<profile>
|
||
<id>light-test</id>
|
||
<properties>
|
||
<skipTests>true</skipTests>
|
||
</properties>
|
||
</profile>
|
||
<profile>
|
||
<id>all-tests</id>
|
||
<activation>
|
||
<property>
|
||
<name>!test</name>
|
||
</property>
|
||
</activation>
|
||
<properties>
|
||
<maven.test.redirectTestOutputToFile>true</maven.test.redirectTestOutputToFile>
|
||
</properties>
|
||
</profile>
|
||
<profile>
|
||
<!--
|
||
Obtain code coverage report. This is done by running Unit tests on our own and suppressing surefire.
|
||
-->
|
||
<id>cobertura</id>
|
||
<build>
|
||
<plugins>
|
||
<plugin>
|
||
<groupId>org.codehaus.gmaven</groupId>
|
||
<artifactId>gmaven-plugin</artifactId>
|
||
<!-- version specified in grandparent pom -->
|
||
<executions>
|
||
<!-- run unit test -->
|
||
<execution>
|
||
<phase>test</phase>
|
||
<goals>
|
||
<goal>execute</goal>
|
||
</goals>
|
||
<configuration>
|
||
<scriptpath>
|
||
<!-- load helpers from hg core -->
|
||
<element>${project.basedir}/../core/src/build-script</element>
|
||
</scriptpath>
|
||
<source>${project.basedir}/src/build-script/unitTest.groovy</source>
|
||
</configuration>
|
||
</execution>
|
||
</executions>
|
||
</plugin>
|
||
</plugins>
|
||
</build>
|
||
</profile>
|
||
<profile>
|
||
<id>jacoco</id>
|
||
<build>
|
||
<plugins>
|
||
<plugin>
|
||
<groupId>org.jacoco</groupId>
|
||
<artifactId>jacoco-maven-plugin</artifactId>
|
||
<version>0.6.3.201306030806</version>
|
||
<executions>
|
||
<!--
|
||
Prepares the property pointing to the JaCoCo runtime agent which
|
||
is passed as VM argument when Maven the Surefire plugin is executed.
|
||
-->
|
||
<execution>
|
||
<id>pre-unit-test</id>
|
||
<goals>
|
||
<goal>prepare-agent</goal>
|
||
</goals>
|
||
<configuration>
|
||
<!-- Sets the path to the file which contains the execution data. -->
|
||
<destFile>${project.build.directory}/coverage-reports/jacoco-ut.exec</destFile>
|
||
<propertyName>jacocoSurefireArgs</propertyName>
|
||
</configuration>
|
||
</execution>
|
||
<!--
|
||
Ensures that the code coverage report for unit tests is created after
|
||
unit tests have been run.
|
||
-->
|
||
<execution>
|
||
<id>post-unit-test</id>
|
||
<phase>test</phase>
|
||
<goals>
|
||
<goal>report</goal>
|
||
</goals>
|
||
<configuration>
|
||
<!-- Sets the path to the file which contains the execution data. -->
|
||
<dataFile>${project.build.directory}/coverage-reports/jacoco-ut.exec</dataFile>
|
||
<!-- Sets the output directory for the code coverage report. -->
|
||
<outputDirectory>${project.reporting.outputDirectory}/jacoco-ut</outputDirectory>
|
||
</configuration>
|
||
</execution>
|
||
</executions>
|
||
</plugin>
|
||
</plugins>
|
||
</build>
|
||
</profile>
|
||
</profiles>
|
||
</project>
|