Security issues fixes
[dmaap/messagerouter/msgrtr.git] / pom.xml
diff --git a/pom.xml b/pom.xml
index a26425e..2630493 100644 (file)
--- a/pom.xml
+++ b/pom.xml
        <modelVersion>4.0.0</modelVersion>
        <groupId>org.onap.dmaap.messagerouter.msgrtr</groupId>
        <artifactId>msgrtr</artifactId>
-       <version>0.0.5</version>
+       <version>1.1.1-SNAPSHOT</version>
        <packaging>jar</packaging>
-       <name>Message Router</name>
+       <name>dmaap-messagerouter-msgrtr</name>
        <description>Message Router - Restful interface built for kafka</description>
-       <url>https://github.com/att/dmaap-framework</url>
+       
+       <parent>
+               <groupId>org.onap.oparent</groupId>
+               <artifactId>oparent</artifactId>
+               <version>0.1.1</version>
+       </parent>
+       
        <properties>
-               <spring.version>3.2.14.RELEASE</spring.version>
+               <spring.version>3.2.15.RELEASE</spring.version>
                <cxf.version>3.0.4</cxf.version>
                <jstl.version>1.2</jstl.version>
-               <sonar.junit.reportsPath>target/surefire-reports</sonar.junit.reportsPath>
-               <sonar.cobertura.reportPath>target/cobertura/cobertura.ser</sonar.cobertura.reportPath>
                <maven.compiler.target>1.7</maven.compiler.target>
                <maven.compiler.source>1.7</maven.compiler.source>
                <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+               
+               <!--  SONAR  -->
+                <jacoco.version>0.7.7.201606060606</jacoco.version>
+           <sonar-jacoco-listeners.version>3.2</sonar-jacoco-listeners.version>
+           <sonar.core.codeCoveragePlugin>jacoco</sonar.core.codeCoveragePlugin>
+           <!-- Default Sonar configuration -->
+           <sonar.jacoco.reportPath>target/code-coverage/jacoco-ut.exec</sonar.jacoco.reportPath>
+           <sonar.jacoco.itReportPath>target/code-coverage/jacoco-it.exec</sonar.jacoco.itReportPath>
+           <!-- Note: This list should match jacoco-maven-plugin's exclusion list below -->
+           <sonar.exclusions>**/gen/**,**/generated-sources/**,**/yang-gen**,**/pax/**</sonar.exclusions>
+           <sitePath>/content/sites/site/org/onap/dmaap/messagerouter/msgrtr/${project.artifactId}/${project.version}</sitePath>
                <nexusproxy>https://nexus.onap.org</nexusproxy>
-               <snapshotNexusPath>/content/repositories/snapshots/</snapshotNexusPath>
-               <releaseNexusPath>/content/repositories/releases/</releaseNexusPath>
-               <stagingNexusPath>/content/repositories/staging/</stagingNexusPath>
-               <sitePath>/content/sites/site/org/onap/datarouter/${project.artifactId}/${project.version}</sitePath>
        </properties>
 
        <!-- Distribution management -->
        <!-- Currently all artifacts will be uploaded to att-public-group reposiotry 
                on Maven Central -->
+       <distributionManagement>
+               <site>
+                       <id>ecomp-site</id>
+                       <url>dav:${nexusproxy}${sitePath}</url>
+               </site>
+       </distributionManagement>
 
        <!-- End Distribution management -->
 
         <licenses>
          <license>
-           <name>Apache  License 2.0</name>
+           <name>Apache License Version 2.0</name>
          </license>
        </licenses>
 
             <organizationUrl>www.att.com</organizationUrl>
           </developer>
         </developers>
-        <distributionManagement>
-       <repository>
-                       <id>ecomp-releases</id>
-                       <name>AAF Release Repository</name>
-                       <url>${nexusproxy}${releaseNexusPath}</url>
-               </repository>
-               <snapshotRepository>
-                       <id>ecomp-snapshots</id>
-                       <name>AAF Snapshot Repository</name>
-                       <url>${nexusproxy}${snapshotNexusPath}</url>
-               </snapshotRepository>
-               <site>
-                       <id>ecomp-site</id>
-                       <url>dav:${nexusproxy}${sitePath}</url>
-               </site>
-       </distributionManagement>
-       
-         <pluginRepositories>
-        <pluginRepository>
-            <id>onap-plugin-snapshots</id>
-            <url>https://nexus.onap.org/content/repositories/snapshots/</url>
-        </pluginRepository>
-    </pluginRepositories>
 
        <dependencies>
-
+       <dependency>
+               <groupId>commons-collections</groupId>
+               <artifactId>commons-collections</artifactId>
+               <version>3.2.2</version>
+       </dependency>
+       <dependency>
+               <groupId>ch.qos.logback</groupId>
+               <artifactId>logback-core</artifactId>
+               <version>1.2.0</version>
+       </dependency>
+       <dependency>
+               <groupId>ch.qos.logback</groupId>
+               <artifactId>logback-classic</artifactId>
+               <version>1.2.0</version>
+       </dependency>
+       <dependency>
+               <groupId>commons-beanutils</groupId>
+               <artifactId>commons-beanutils</artifactId>
+               <version>1.9.2</version>
+               <exclusions>
+                       <!-- We have JCL-over-SLF4J instead. -->
+                       <exclusion>
+                               <groupId>commons-logging</groupId>
+                               <artifactId>commons-logging</artifactId>
+                       </exclusion>
+               </exclusions>
+       </dependency>
+       <dependency>
+               <groupId>org.codehaus.groovy</groupId>
+               <artifactId>groovy-all</artifactId>
+               <version>2.4.4</version>
+               <scope>compile</scope>
+               <exclusions>
+                       <exclusion>
+                               <artifactId>jline</artifactId>
+                               <groupId>jline</groupId>
+                       </exclusion>
+               </exclusions>
+       </dependency>
+       <dependency>
+               <groupId>commons-fileupload</groupId>
+               <artifactId>commons-fileupload</artifactId>
+               <version>1.3.3</version>
+       </dependency>
+    
                <dependency>
                        <groupId>junit</groupId>
                        <artifactId>junit</artifactId>
                        <version>4.11</version>
                        <scope>test</scope>
                </dependency>
+               <dependency>
+                       <groupId>com.att.aft</groupId>
+                       <artifactId>dme2</artifactId>
+                       <version>3.1.200-oss</version>
+                       </dependency>
 
                <!-- slf4j logger -->
                <dependency>
                        </exclusions>
                </dependency>
                <dependency>
-                       <groupId>org.apache.httpcomponents</groupId>
-                                       <artifactId>httpclient</artifactId>
-                                       <version>4.4.1</version>
-               </dependency>
-               <dependency>
-                       <groupId>org.apache.httpcomponents</groupId>
-                                       <artifactId>httpclient-cache</artifactId>
-                                       <version>4.4.1</version>
-               </dependency>
+       <groupId>org.apache.httpcomponents</groupId>
+       <artifactId>httpclient</artifactId>
+       <version>4.5.3</version>
+</dependency>
+       <dependency>
+               <groupId>org.apache.httpcomponents</groupId>
+               <artifactId>httpclient-cache</artifactId>
+               <version>4.5.3</version>
+       </dependency>
+       <dependency>
+               <groupId>org.apache.httpcomponents</groupId>
+               <artifactId>httpcore</artifactId>
+               <version>4.4.1</version>
+       </dependency>
+               
                
                <!-- explicit jline add b/c it conflicts with the zk client -->
                <dependency>
                        <version>2.6.0</version>
                </dependency>
 
-               <dependency>
-                       <groupId>com.att.aft</groupId>
-                       <artifactId>dme2</artifactId>
-                       <version>3.1.200</version>
-               </dependency>
 
        <dependency>
            <groupId>com.google.code.gson</groupId>
            <artifactId>gson</artifactId>
            <version>2.8.0</version>
        </dependency>
+
+               <dependency>
+                       <groupId>com.fasterxml.jackson.core</groupId>
+                       <artifactId>jackson-core</artifactId>
+                       <version>2.8.5</version>
+                       <scope>test</scope>
+               </dependency>
+
+               <dependency>
+                       <groupId>org.powermock</groupId>
+                       <artifactId>powermock-api-mockito</artifactId>
+                       <version>1.5.6</version>
+                       <scope>test</scope>
+               </dependency>
+
+               <dependency>
+                       <groupId>org.powermock</groupId>
+                       <artifactId>powermock-module-junit4</artifactId>
+                       <version>1.5.6</version>
+                       <scope>test</scope>
+               </dependency>
+               
+               <dependency>
+                   <groupId>org.powermock</groupId>
+                   <artifactId>powermock-module-junit4-rule</artifactId>
+                   <version>1.5.6</version>
+                   <scope>test</scope>
+               </dependency>
+       
        </dependencies>
        <build>
                <finalName>DMaaP</finalName>
                        <!-- <phase>package</phase> bind to the packaging phase <goals> <goal>single</goal> 
                                </goals> </execution> </executions> </plugin> -->
                        <!-- -->
-                         <plugin>
-                               <groupId>org.sonatype.plugins</groupId>
-                               <artifactId>nexus-staging-maven-plugin</artifactId>
-                               <version>1.6.7</version>
-                               <extensions>true</extensions>
-                                       <configuration>
-                                               <nexusUrl>${nexusproxy}</nexusUrl>
-                                               <stagingProfileId>176c31dfe190a</stagingProfileId>
-                                               <serverId>ecomp-staging</serverId>
-                                       </configuration>
+                       <plugin>
+                               <groupId>org.apache.maven.plugins</groupId>
+                               <artifactId>maven-site-plugin</artifactId>
+                               <version>3.6</version>
+                               <dependencies>
+                                       <dependency>
+                                               <groupId>org.apache.maven.wagon</groupId>
+                                               <artifactId>wagon-webdav-jackrabbit</artifactId>
+                                               <version>2.10</version>
+                                       </dependency>
+                               </dependencies>
                        </plugin>
                        <plugin>
                                <groupId>org.apache.maven.plugins</groupId>
                                <version>2.12.4</version>
                                <configuration>
                                        <excludes>
-                                               <!-- exclude until junits updated -->
-                                               <exclude>**/DME2*.java</exclude>
+                                               <!-- exclude until junits updated  
+                                               <exclude>**/DME2*.java</exclude> -->
                                        </excludes>
                                        <!-- <skipTests>true</skipTests> -->
                                </configuration>
                        </plugin>
-                       <plugin>
-                               <groupId>org.codehaus.mojo</groupId>
-                               <artifactId>cobertura-maven-plugin</artifactId>
-                               <version>2.7</version>
-                               <configuration>
-                                       <formats>
-                                               <format>html</format>
-                                               <format>xml</format>
-                                       </formats>
-                               </configuration>
-                       </plugin>
-                       <plugin>
-                               <groupId>org.jacoco</groupId>
-                               <artifactId>jacoco-maven-plugin</artifactId>
-                               <version>0.6.2.201302030002</version>
-                               <configuration>
-                                       <destfile>${basedir}/target/coverage-reports/jacoco-unit.exec</destfile>
-                                       <datafile>${basedir}/target/coverage-reports/jacoco-unit.exec</datafile>
-                               </configuration>
-                       </plugin>
-                       <plugin>
-                               <groupId>org.apache.maven.plugins</groupId>
-                               <artifactId>maven-gpg-plugin</artifactId>
-                               <version>1.5</version>
-                               <executions>
-                                       <execution>
-                                               <id>sign-artifacts</id>
-                                               <phase>verify</phase>
-                                               <goals>
-                                                       <goal>sign</goal>
-                                               </goals>
-                                       </execution>
-                               </executions>
-                       </plugin>        
-
-               </plugins>
+                               <plugin>
+                                       <groupId>org.codehaus.mojo</groupId>
+                                       <artifactId>cobertura-maven-plugin</artifactId>
+                                       <version>2.7</version>
+                                       <configuration>
+                                           <formats>
+                                           <format>html</format>
+                                           <format>xml</format>
+                                         </formats>
+                                       </configuration>
+                          </plugin>    
+               <!-- <plugin>
+          <groupId>org.jacoco</groupId>
+          <artifactId>jacoco-maven-plugin</artifactId>
+          <version>${jacoco.version}</version>
+          <configuration>
+            Note: This exclusion list should match <sonar.exclusions>
+         property above
+            <excludes>
+              <exclude>**/gen/**</exclude>
+              <exclude>**/generated-sources/**</exclude>
+              <exclude>**/yang-gen/**</exclude>
+              <exclude>**/pax/**</exclude>
+            </excludes>
+          </configuration>
+          <executions>
+            
+        Prepares the property pointing to the JaCoCo runtime agent which
+        is passed as VM argument when Maven the Surefire plugin is executed.
+       
+            <execution>
+              <id>pre-unit-test</id>
+              <goals>
+                <goal>prepare-agent</goal>
+              </goals>
+              <configuration>
+                Sets the path to the file which contains the execution data.
+                <destFile>${project.build.directory}/code-coverage/jacoco-ut.exec</destFile>
+                
+            Sets the name of the property containing the settings
+            for JaCoCo runtime agent.
+       
+                <propertyName>surefireArgLine</propertyName>
+              </configuration>
+            </execution>
+            
+        Ensures that the code coverage report for unit tests is created after
+        unit tests have been run.
+       
+            <execution>
+              <id>post-unit-test</id>
+              <phase>test</phase>
+              <goals>
+                <goal>report</goal>
+              </goals>
+              <configuration>
+                Sets the path to the file which contains the execution data.
+                <dataFile>${project.build.directory}/code-coverage/jacoco-ut.exec</dataFile>
+                Sets the output directory for the code coverage report.
+                <outputDirectory>${project.reporting.outputDirectory}/jacoco-ut</outputDirectory>
+              </configuration>
+            </execution>
+            <execution>
+              <id>pre-integration-test</id>
+              <phase>pre-integration-test</phase>
+              <goals>
+                <goal>prepare-agent</goal>
+              </goals>
+              <configuration>
+                Sets the path to the file which contains the execution data.
+                <destFile>${project.build.directory}/code-coverage/jacoco-it.exec</destFile>
+                
+            Sets the name of the property containing the settings
+            for JaCoCo runtime agent.
+       
+                <propertyName>failsafeArgLine</propertyName>
+              </configuration>
+            </execution>
+            
+        Ensures that the code coverage report for integration tests after
+        integration tests have been run.
+       
+            <execution>
+              <id>post-integration-test</id>
+              <phase>post-integration-test</phase>
+              <goals>
+                <goal>report</goal>
+              </goals>
+              <configuration>
+                Sets the path to the file which contains the execution data.
+                <dataFile>${project.build.directory}/code-coverage/jacoco-it.exec</dataFile>
+                Sets the output directory for the code coverage report.
+                <outputDirectory>${project.reporting.outputDirectory}/jacoco-it</outputDirectory>
+              </configuration>
+            </execution>
+          </executions>
+        </plugin>              
+                --></plugins>
        </build>
 
        <!-- <profiles> <profile> <id>jenkins</id> <activation> <property> <name>env.BUILD_NUMBER</name> 
                <artifactId>maven-deploy-plugin</artifactId> <version>2.5</version> <configuration> 
                <skip>true</skip> </configuration> </plugin> </plugins> </build> </profile> 
                </profiles> -->
-</project>
\ No newline at end of file
+</project>