Right way to declare dependency on idp-plugin-duo-api?
Christopher Bongaarts
cab at umn.edu
Fri Mar 29 18:15:02 UTC 2024
[Moved from users@]
On 3/29/2024 5:12 AM, Rod Widdowson wrote:
> (probably better in shib-dev)
>
>> net.shibboleth.idp.plugin.authn:idp-plugin-duo-api:jar:2.0.0: The
>> following artifacts could not be resolved:
>> net.shibboleth:shib-testing:pom:9.0.0-SNAPSHOT (absent): Could not find
>> artifact net.shibboleth:shib-testing:pom:9.0.0-SNAPSHOT in
>> shibboleth-snapshots (https://build.shibboleth.net/maven/snapshots/)
> I'd start by saying
>
> mvn dependency:tree
>
> And see who thinks you need this. I just looked at the tree for duo-api:2.0.0 and it doesn't mention shib-testing at all.
>
> A word to the wise: maven inheritance is a "bit strange" (edited) and seldom does what you want or expect, just something very close but not quite.
>
> /Rid
>
If I copy the "real" shib-testing-9.0.0.pom to
shib-testing-9.0.0-SNAPSHOT.pom, I get this tree:
[INFO] --- dependency:3.3.0:tree (default-cli) @ idp3 ---
[INFO] edu.umn.oit.idm.shib:idp3:jar:1.0.3
[INFO] +- net.shibboleth.idp:idp-authn-api:jar:5.1.1:provided
[INFO] | +- net.shibboleth:shib-profile-api:jar:5.1.1:provided
[INFO] | | +- org.opensaml:opensaml-security-api:jar:5.1.1:provided
[INFO] | | | \- org.cryptacular:cryptacular:jar:1.2.6:provided
[INFO] | | +- org.opensaml:opensaml-xmlsec-api:jar:5.1.1:provided
[INFO] | | +- net.shibboleth:shib-service:jar:9.1.1:provided
[INFO] | | +- net.shibboleth:shib-networking-spring:jar:9.1.1:provided
[INFO] | | +- net.shibboleth:shib-spring:jar:9.1.1:provided
[INFO] | | +- org.springframework:spring-expression:jar:6.1.5:provided
[INFO] | | +- org.apache.commons:commons-lang3:jar:3.14.0:provided
[INFO] | | +-
org.apache.httpcomponents.client5:httpclient5:jar:5.3.1:provided
[INFO] | | | \-
org.apache.httpcomponents.core5:httpcore5-h2:jar:5.2.4:provided
[INFO] | | \- org.apache.httpcomponents.core5:httpcore5:jar:5.2.4:provided
[INFO] | +- net.shibboleth:shib-attribute-api:jar:5.1.1:provided
[INFO] | | \- org.opensaml:opensaml-soap-api:jar:5.1.1:provided
[INFO] | +- org.opensaml:opensaml-core-api:jar:5.1.1:provided
[INFO] | +- org.opensaml:opensaml-storage-api:jar:5.1.1:provided
[INFO] | +- org.opensaml:opensaml-profile-api:jar:5.1.1:provided
[INFO] | +- org.opensaml:opensaml-messaging-api:jar:5.1.1:provided
[INFO] | +- net.shibboleth:shib-security:jar:9.1.1:provided
[INFO] | | +- org.bouncycastle:bcprov-jdk18on:jar:1.77:provided
[INFO] | | \- org.bouncycastle:bcpkix-jdk18on:jar:1.77:provided
[INFO] | | \- org.bouncycastle:bcutil-jdk18on:jar:1.77:provided
[INFO] | +- net.shibboleth:shib-velocity:jar:9.1.1:provided
[INFO] | +- com.google.guava:guava:jar:33.0.0-jre:compile
[INFO] | | +- com.google.guava:failureaccess:jar:1.0.2:compile
[INFO] | | +-
com.google.guava:listenablefuture:jar:9999.0-empty-to-avoid-conflict-with-guava:compile
[INFO] | | +- org.checkerframework:checker-qual:jar:3.41.0:compile
[INFO] | | +-
com.google.errorprone:error_prone_annotations:jar:2.23.0:compile
[INFO] | | \- com.google.j2objc:j2objc-annotations:jar:2.8:compile
[INFO] | +- org.ldaptive:ldaptive:jar:2.3.1:provided
[INFO] | | +- io.netty:netty-handler:jar:4.1.106.Final:provided
[INFO] | | | +- io.netty:netty-common:jar:4.1.106.Final:provided
[INFO] | | | +- io.netty:netty-resolver:jar:4.1.106.Final:provided
[INFO] | | | +- io.netty:netty-buffer:jar:4.1.106.Final:provided
[INFO] | | | +- io.netty:netty-transport:jar:4.1.106.Final:provided
[INFO] | | | +-
io.netty:netty-transport-native-unix-common:jar:4.1.106.Final:provided
[INFO] | | | \- io.netty:netty-codec:jar:4.1.106.Final:provided
[INFO] | | +-
io.netty:netty-transport-native-epoll:jar:linux-x86_64:4.1.106.Final:provided
[INFO] | | | \-
io.netty:netty-transport-classes-epoll:jar:4.1.106.Final:provided
[INFO] | | +-
io.netty:netty-transport-native-epoll:jar:linux-aarch_64:4.1.106.Final:provided
[INFO] | | +-
io.netty:netty-transport-native-kqueue:jar:osx-x86_64:4.1.106.Final:provided
[INFO] | | | \-
io.netty:netty-transport-classes-kqueue:jar:4.1.106.Final:provided
[INFO] | | \-
io.netty:netty-transport-native-kqueue:jar:osx-aarch_64:4.1.106.Final:provided
[INFO] | +- org.apache.velocity:velocity-engine-core:jar:2.3:provided
[INFO] | +- org.springframework:spring-beans:jar:6.1.5:provided
[INFO] | +- org.springframework:spring-core:jar:6.1.5:provided
[INFO] | | \- org.springframework:spring-jcl:jar:6.1.5:provided
[INFO] | +- org.springframework.webflow:spring-webflow:jar:3.0.0:provided
[INFO] | | +-
org.springframework.webflow:spring-binding:jar:3.0.0:provided
[INFO] | | +- org.springframework:spring-web:jar:6.1.5:provided
[INFO] | | \- org.springframework:spring-webmvc:jar:6.1.5:provided
[INFO] | \- io.dropwizard.metrics:metrics-core:jar:4.2.25:provided
[INFO] +- net.shibboleth.idp:idp-saml-api:jar:5.1.1:provided
[INFO] | +- net.shibboleth:shib-saml-profile-api:jar:5.1.1:provided
[INFO] | \- org.opensaml:opensaml-saml-api:jar:5.1.1:provided
[INFO] | \- org.apache.santuario:xmlsec:jar:3.0.3:provided
[INFO] +- net.shibboleth.idp:idp-profile-api:jar:5.1.1:provided
[INFO] | \- org.springframework:spring-context:jar:6.1.5:provided
[INFO] | +- org.springframework:spring-aop:jar:6.1.5:provided
[INFO] | \- io.micrometer:micrometer-observation:jar:1.12.4:provided
[INFO] | \- io.micrometer:micrometer-commons:jar:1.12.4:provided
[INFO] +- net.shibboleth.idp:idp-session-api:jar:5.1.1:provided
[INFO] | \- net.shibboleth:shib-networking:jar:9.1.1:provided
[INFO] | \-
org.apache.httpcomponents.client5:httpclient5-cache:jar:5.3.1:provided
[INFO] +-
net.shibboleth.idp.plugin.authn:idp-plugin-duo-api:jar:2.0.0:provided
[INFO] +- jakarta.servlet:jakarta.servlet-api:jar:6.0.0:provided
[INFO] +- com.duosecurity:duo-universal-sdk:jar:1.1.3:compile
[INFO] | +- com.squareup.retrofit2:retrofit:jar:2.9.0:compile
[INFO] | | \- com.squareup.okhttp3:okhttp:jar:3.14.9:compile
[INFO] | | \- com.squareup.okio:okio:jar:1.17.2:compile
[INFO] | +- com.squareup.retrofit2:converter-jackson:jar:2.9.0:compile
[INFO] | | \-
com.fasterxml.jackson.core:jackson-databind:jar:2.16.1:compile
[INFO] | | \-
com.fasterxml.jackson.core:jackson-annotations:jar:2.16.1:compile
[INFO] | +- com.fasterxml.jackson.core:jackson-core:jar:2.16.1:compile
[INFO] | +- com.auth0:java-jwt:jar:3.3.0:compile
[INFO] | \- com.squareup.okhttp3:logging-interceptor:jar:4.9.1:compile
[INFO] | \- org.jetbrains.kotlin:kotlin-stdlib-jdk8:jar:1.4.10:compile
[INFO] | +- org.jetbrains.kotlin:kotlin-stdlib:jar:1.4.10:compile
[INFO] | | +-
org.jetbrains.kotlin:kotlin-stdlib-common:jar:1.4.10:compile
[INFO] | | \- org.jetbrains:annotations:jar:13.0:compile
[INFO] | \-
org.jetbrains.kotlin:kotlin-stdlib-jdk7:jar:1.4.10:compile
[INFO] +- jakarta.json:jakarta.json-api:jar:2.0.1:provided
[INFO] +- org.glassfish:jakarta.json:jar:2.0.1:runtime
[INFO] +- org.slf4j:slf4j-api:jar:2.0.12:compile
[INFO] +- com.google.code.findbugs:jsr305:jar:3.0.2:compile
[INFO] +- net.shibboleth:shib-support:jar:9.1.1:compile
[INFO] | \- commons-codec:commons-codec:jar:1.16.1:compile
[INFO] +- org.testng:testng:jar:7.7.1:test
[INFO] | +- com.beust:jcommander:jar:1.81:test
[INFO] | \- org.webjars:jquery:jar:3.6.1:test
[INFO] +- ch.qos.logback:logback-classic:jar:1.5.3:test
[INFO] | \- ch.qos.logback:logback-core:jar:1.5.3:runtime
[INFO] \- org.openjdk.nashorn:nashorn-core:jar:15.4:test
[INFO] +- org.ow2.asm:asm:jar:7.3.1:test
[INFO] +- org.ow2.asm:asm-commons:jar:7.3.1:test
[INFO] | \- org.ow2.asm:asm-analysis:jar:7.3.1:test
[INFO] +- org.ow2.asm:asm-tree:jar:7.3.1:test
[INFO] \- org.ow2.asm:asm-util:jar:7.3.1:test
So, not sure where it's picking up the shib-testing dependency from.
For now, the fake snapshot pom allows me to get to the compilation
phase, so I can continue to work on the 5.1.1 updates.
--
%% Christopher A. Bongaarts %% cab at umn.edu %%
%% OIT - Identity Management %% http://umn.edu/~cab %%
%% University of Minnesota %% +1 (612) 625-1809 %%
More information about the dev
mailing list