Security issues fixes
[dmaap/messagerouter/msgrtr.git] / pom.xml
1 <!--
2      ============LICENSE_START=======================================================
3      org.onap.dmaap
4      ================================================================================
5      Copyright © 2017 AT&T Intellectual Property. All rights reserved.
6      ================================================================================
7      Licensed under the Apache License, Version 2.0 (the "License");
8      you may not use this file except in compliance with the License.
9      You may obtain a copy of the License at
10            http://www.apache.org/licenses/LICENSE-2.0
11      
12      Unless required by applicable law or agreed to in writing, software
13      distributed under the License is distributed on an "AS IS" BASIS,
14      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
15      See the License for the specific language governing permissions and
16      limitations under the License.
17      ============LICENSE_END=========================================================
18    
19      ECOMP is a trademark and service mark of AT&T Intellectual Property.
20      
21  -->
22 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
23         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
24         <modelVersion>4.0.0</modelVersion>
25         <groupId>org.onap.dmaap.messagerouter.msgrtr</groupId>
26         <artifactId>msgrtr</artifactId>
27         <version>1.1.1-SNAPSHOT</version>
28         <packaging>jar</packaging>
29         <name>dmaap-messagerouter-msgrtr</name>
30         <description>Message Router - Restful interface built for kafka</description>
31         
32         <parent>
33                 <groupId>org.onap.oparent</groupId>
34                 <artifactId>oparent</artifactId>
35                 <version>0.1.1</version>
36         </parent>
37         
38         <properties>
39                 <spring.version>3.2.15.RELEASE</spring.version>
40                 <cxf.version>3.0.4</cxf.version>
41                 <jstl.version>1.2</jstl.version>
42                 <maven.compiler.target>1.7</maven.compiler.target>
43                 <maven.compiler.source>1.7</maven.compiler.source>
44                 <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
45                 
46                 <!--  SONAR  -->
47                  <jacoco.version>0.7.7.201606060606</jacoco.version>
48             <sonar-jacoco-listeners.version>3.2</sonar-jacoco-listeners.version>
49             <sonar.core.codeCoveragePlugin>jacoco</sonar.core.codeCoveragePlugin>
50             <!-- Default Sonar configuration -->
51             <sonar.jacoco.reportPath>target/code-coverage/jacoco-ut.exec</sonar.jacoco.reportPath>
52             <sonar.jacoco.itReportPath>target/code-coverage/jacoco-it.exec</sonar.jacoco.itReportPath>
53             <!-- Note: This list should match jacoco-maven-plugin's exclusion list below -->
54             <sonar.exclusions>**/gen/**,**/generated-sources/**,**/yang-gen**,**/pax/**</sonar.exclusions>
55             <sitePath>/content/sites/site/org/onap/dmaap/messagerouter/msgrtr/${project.artifactId}/${project.version}</sitePath>
56                 <nexusproxy>https://nexus.onap.org</nexusproxy>
57         </properties>
58
59         <!-- Distribution management -->
60         <!-- Currently all artifacts will be uploaded to att-public-group reposiotry 
61                 on Maven Central -->
62         <distributionManagement>
63                 <site>
64                         <id>ecomp-site</id>
65                         <url>dav:${nexusproxy}${sitePath}</url>
66                 </site>
67         </distributionManagement>
68
69         <!-- End Distribution management -->
70
71          <licenses>
72           <license>
73             <name>Apache License Version 2.0</name>
74           </license>
75         </licenses>
76
77         <developers>
78            <developer>
79              <name>Rajashree</name>
80              <email></email>
81              <organization>ATT</organization>
82              <organizationUrl>www.att.com</organizationUrl>
83            </developer>
84            <developer>
85              <name>Ramkumar</name>
86              <email></email>
87              <organization>ATT</organization>
88              <organizationUrl>www.att.com</organizationUrl>
89            </developer>
90          </developers>
91
92         <dependencies>
93         <dependency>
94                 <groupId>commons-collections</groupId>
95                 <artifactId>commons-collections</artifactId>
96                 <version>3.2.2</version>
97         </dependency>
98         <dependency>
99                 <groupId>ch.qos.logback</groupId>
100                 <artifactId>logback-core</artifactId>
101                 <version>1.2.0</version>
102         </dependency>
103         <dependency>
104                 <groupId>ch.qos.logback</groupId>
105                 <artifactId>logback-classic</artifactId>
106                 <version>1.2.0</version>
107         </dependency>
108         <dependency>
109                 <groupId>commons-beanutils</groupId>
110                 <artifactId>commons-beanutils</artifactId>
111                 <version>1.9.2</version>
112                 <exclusions>
113                         <!-- We have JCL-over-SLF4J instead. -->
114                         <exclusion>
115                                 <groupId>commons-logging</groupId>
116                                 <artifactId>commons-logging</artifactId>
117                         </exclusion>
118                 </exclusions>
119         </dependency>
120         <dependency>
121                 <groupId>org.codehaus.groovy</groupId>
122                 <artifactId>groovy-all</artifactId>
123                 <version>2.4.4</version>
124                 <scope>compile</scope>
125                 <exclusions>
126                         <exclusion>
127                                 <artifactId>jline</artifactId>
128                                 <groupId>jline</groupId>
129                         </exclusion>
130                 </exclusions>
131         </dependency>
132         <dependency>
133                 <groupId>commons-fileupload</groupId>
134                 <artifactId>commons-fileupload</artifactId>
135                 <version>1.3.3</version>
136         </dependency>
137     
138                 <dependency>
139                         <groupId>junit</groupId>
140                         <artifactId>junit</artifactId>
141                         <version>4.11</version>
142                         <scope>test</scope>
143                 </dependency>
144                 <dependency>
145                         <groupId>com.att.aft</groupId>
146                         <artifactId>dme2</artifactId>
147                         <version>3.1.200-oss</version>
148                         </dependency>
149
150                 <!-- slf4j logger -->
151                 <dependency>
152                         <groupId>org.slf4j</groupId>
153                         <artifactId>slf4j-api</artifactId>
154                         <version>1.7.6</version>
155                 </dependency>
156
157                 <dependency>
158                         <groupId>javax.inject</groupId>
159                         <artifactId>javax.inject</artifactId>
160                         <version>1</version>
161                 </dependency>
162
163                 <dependency>
164                         <groupId>com.att.ajsc</groupId>
165                         <artifactId>ajsc-core</artifactId>
166                         <version>1.0.0</version>
167                 </dependency>
168
169                 <dependency>
170                         <groupId>javax.ws.rs</groupId>
171                         <artifactId>javax.ws.rs-api</artifactId>
172                         <version>2.0.1</version>
173                 </dependency>
174
175                 <!-- <dependency> <groupId>org.apache.cxf</groupId> <artifactId>cxf-rt-rs-client</artifactId> 
176                         <version>${cxf.version}</version> </dependency> <dependency> <groupId>org.apache.cxf</groupId> 
177                         <artifactId>cxf-rt-frontend-jaxws</artifactId> <version>${cxf.version}</version> 
178                         </dependency> <dependency> <groupId>org.apache.cxf</groupId> <artifactId>cxf-rt-transports-http</artifactId> 
179                         <version>${cxf.version}</version> </dependency> Jetty is needed if you're 
180                         are not using the CXFServlet <dependency> <groupId>org.apache.cxf</groupId> 
181                         <artifactId>cxf-rt-transports-http-jetty</artifactId> <version>${cxf.version}</version> 
182                         </dependency> -->
183                 <!-- Begin - Spring Dependencies for DI -->
184                 <dependency>
185                         <groupId>org.springframework</groupId>
186                         <artifactId>spring-core</artifactId>
187                         <version>${spring.version}</version>
188                 </dependency>
189                 <dependency>
190                         <groupId>org.springframework</groupId>
191                         <artifactId>spring-context</artifactId>
192                         <version>${spring.version}</version>
193                 </dependency>
194                 <dependency>
195                         <groupId>org.springframework</groupId>
196                         <artifactId>spring-webmvc</artifactId>
197                         <version>${spring.version}</version>
198                 </dependency>
199                 <dependency>
200                         <groupId>org.springframework</groupId>
201                         <artifactId>spring-web</artifactId>
202                         <version>${spring.version}</version>
203                 </dependency>
204                 <dependency>
205                         <groupId>javax.servlet</groupId>
206                         <artifactId>javax.servlet-api</artifactId>
207                         <version>3.0.1</version>
208                         <scope>provided</scope>
209                 </dependency>
210                 <!-- End - Spring Dependencies for DI -->
211                 <!-- Begin - Dependency on Dmaap Spring layer -->
212                 <!-- <dependency> <groupId>com.att.dmaap</groupId> <artifactId>dmaap-spring</artifactId> 
213                         <version>0.0.1-SNAPSHOT</version> </dependency> -->
214                 <!-- End - Dependency on Dmaap Spring layer -->
215                 <!-- Begin - Dependency on log4j for logging purpose -->
216                 <!-- <dependency> <groupId>log4j</groupId> <artifactId>log4j</artifactId> 
217                         <version>1.2.17</version> </dependency> -->
218                 <!-- Log4j's enhanced pattern layout is shipped separately <dependency> 
219                         <groupId>log4j</groupId> <artifactId>apache-log4j-extras</artifactId> <version>1.2.17</version> 
220                         </dependency> -->
221                 <!-- End - Dependency on log4j for logging purpose -->
222                 <!-- ZooKeeper Library -->
223                 <dependency>
224                         <groupId>org.apache.zookeeper</groupId>
225                         <artifactId>zookeeper</artifactId>
226                         <version>3.4.6</version>
227                 </dependency>
228
229                 <!-- JSON libraries -->
230                 <dependency>
231                         <groupId>org.json</groupId>
232                         <artifactId>json</artifactId>
233                         <version>20131018</version>
234                 </dependency>
235
236                 <!-- Apache Kafka -->
237                 <dependency>
238                         <groupId>org.apache.kafka</groupId>
239                         <artifactId>kafka_2.10</artifactId>
240                         <version>0.8.2.1</version>
241                 </dependency>
242
243                 <dependency>
244                         <groupId>com.att.eelf</groupId>
245                         <artifactId>eelf-core</artifactId>
246                         <version>0.0.1</version>
247                         <scope>compile</scope>
248                 </dependency>
249                 <!-- our NSA server library -->
250                 <dependency>
251                         <groupId>com.att.nsa</groupId>
252                         <artifactId>nsaServerLibrary</artifactId>
253                         <version>1.0.10</version>
254                 </dependency>
255                 <dependency>
256                         <groupId>com.att.nsa</groupId>
257                         <artifactId>saToolkit</artifactId>
258                         <version>0.0.1</version>
259                 </dependency>
260
261                 <!-- our Highland Park library -->
262                  <!-- <dependency>
263                         <groupId>com.att.nsa</groupId>
264                         <artifactId>highlandParkCore</artifactId>
265                         <version>0.4.9</version>
266                 </dependency>  -->
267
268                 <!-- our base client library, for its command line tools -->
269                 <dependency>
270                         <groupId>com.att.nsa</groupId>
271                         <artifactId>saClientLibrary</artifactId>
272                         <version>0.0.1</version>
273                         <exclusions>
274                                 <exclusion>
275                                         <groupId>org.apache.httpcomponents</groupId>
276                                         <artifactId>httpclient</artifactId>
277                                 </exclusion>
278                                 <exclusion>
279                                         <groupId>org.apache.httpcomponents</groupId>
280                                         <artifactId>httpclient-cache</artifactId>
281                                 </exclusion>
282                         </exclusions>
283                 </dependency>
284                 <dependency>
285         <groupId>org.apache.httpcomponents</groupId>
286         <artifactId>httpclient</artifactId>
287         <version>4.5.3</version>
288 </dependency>
289         <dependency>
290                 <groupId>org.apache.httpcomponents</groupId>
291                 <artifactId>httpclient-cache</artifactId>
292                 <version>4.5.3</version>
293         </dependency>
294         <dependency>
295                 <groupId>org.apache.httpcomponents</groupId>
296                 <artifactId>httpcore</artifactId>
297                 <version>4.4.1</version>
298         </dependency>
299                 
300                 
301                 <!-- explicit jline add b/c it conflicts with the zk client -->
302                 <dependency>
303                         <groupId>jline</groupId>
304                         <artifactId>jline</artifactId>
305                         <version>2.12.1</version>
306                 </dependency>
307
308                 <dependency>
309                         <groupId>org.apache.curator</groupId>
310                         <artifactId>curator-recipes</artifactId>
311                         <version>2.6.0</version>
312                 </dependency>
313
314                 <dependency>
315                         <groupId>org.apache.curator</groupId>
316                         <artifactId>curator-test</artifactId>
317                         <version>2.6.0</version>
318                 </dependency>
319
320
321         <dependency>
322             <groupId>com.google.code.gson</groupId>
323             <artifactId>gson</artifactId>
324             <version>2.8.0</version>
325         </dependency>
326
327                 <dependency>
328                         <groupId>com.fasterxml.jackson.core</groupId>
329                         <artifactId>jackson-core</artifactId>
330                         <version>2.8.5</version>
331                         <scope>test</scope>
332                 </dependency>
333
334                 <dependency>
335                         <groupId>org.powermock</groupId>
336                         <artifactId>powermock-api-mockito</artifactId>
337                         <version>1.5.6</version>
338                         <scope>test</scope>
339                 </dependency>
340
341                 <dependency>
342                         <groupId>org.powermock</groupId>
343                         <artifactId>powermock-module-junit4</artifactId>
344                         <version>1.5.6</version>
345                         <scope>test</scope>
346                 </dependency>
347                 
348                 <dependency>
349                     <groupId>org.powermock</groupId>
350                     <artifactId>powermock-module-junit4-rule</artifactId>
351                     <version>1.5.6</version>
352                     <scope>test</scope>
353                 </dependency>
354         
355         </dependencies>
356         <build>
357                 <finalName>DMaaP</finalName>
358                 <resources>
359                         <resource>
360                                 <directory>src/main/resources</directory>
361                                 <filtering>true</filtering>
362                                 <includes>
363                                         <include>**/*.properties</include>
364                                 </includes>
365                         </resource>
366                         <!-- <resource> <directory>src/main/config</directory> <filtering>true</filtering> 
367                                 <includes> <include>**/log4j*.xml</include> </includes> </resource> <resource> 
368                                 <directory>src/main/resources</directory> <filtering>false</filtering> <excludes> 
369                                 <exclude>**/cambriaApiVersion.properties</exclude> </excludes> </resource> -->
370                 </resources>
371                 <plugins>
372                         <!-- <plugin> <artifactId>maven-assembly-plugin</artifactId> <version>2.4.1</version> 
373                                 <configuration> <descriptors> <descriptor>src/assembly/dep.xml</descriptor> 
374                                 </descriptors> </configuration> <executions> <execution> <id>make-assembly</id> 
375                                 this is used for inheritance merges -->
376                         <!-- <phase>package</phase> bind to the packaging phase <goals> <goal>single</goal> 
377                                 </goals> </execution> </executions> </plugin> -->
378                         <!-- -->
379                         <plugin>
380                                 <groupId>org.apache.maven.plugins</groupId>
381                                 <artifactId>maven-site-plugin</artifactId>
382                                 <version>3.6</version>
383                                 <dependencies>
384                                         <dependency>
385                                                 <groupId>org.apache.maven.wagon</groupId>
386                                                 <artifactId>wagon-webdav-jackrabbit</artifactId>
387                                                 <version>2.10</version>
388                                         </dependency>
389                                 </dependencies>
390                         </plugin>
391                         <plugin>
392                                 <groupId>org.apache.maven.plugins</groupId>
393                                 <artifactId>maven-javadoc-plugin</artifactId>
394                                 <version>2.10.4</version>
395                                 <configuration>
396                                         <additionalparam>-Xdoclint:none</additionalparam>
397                                 </configuration>
398                                 <executions>
399                                         <execution>
400                                                 <id>attach-javadocs</id>
401                                                 <goals>
402                                                         <goal>jar</goal>
403                                                 </goals>
404                                         </execution>
405                                 </executions>
406                         </plugin>
407                         <plugin>
408                                 <groupId>org.apache.maven.plugins</groupId>
409                                 <artifactId>maven-source-plugin</artifactId>
410                                 <version>3.0.0</version>
411                                 <executions>
412                                         <execution>
413                                                 <id>attach-sources</id>
414                                                 <goals>
415                                                         <goal>jar-no-fork</goal>
416                                                 </goals>
417                                         </execution>
418                                 </executions>
419                         </plugin>                       
420                         <plugin>
421                                 <groupId>org.apache.maven.plugins</groupId>
422                                 <artifactId>maven-surefire-plugin</artifactId>
423                                 <version>2.12.4</version>
424                                 <configuration>
425                                         <excludes>
426                                                 <!-- exclude until junits updated  
427                                                 <exclude>**/DME2*.java</exclude> -->
428                                         </excludes>
429                                         <!-- <skipTests>true</skipTests> -->
430                                 </configuration>
431                         </plugin>
432                                 <plugin>
433                                         <groupId>org.codehaus.mojo</groupId>
434                                         <artifactId>cobertura-maven-plugin</artifactId>
435                                         <version>2.7</version>
436                                         <configuration>
437                                             <formats>
438                                             <format>html</format>
439                                             <format>xml</format>
440                                           </formats>
441                                         </configuration>
442                            </plugin>    
443                 <!-- <plugin>
444           <groupId>org.jacoco</groupId>
445           <artifactId>jacoco-maven-plugin</artifactId>
446           <version>${jacoco.version}</version>
447           <configuration>
448             Note: This exclusion list should match <sonar.exclusions>
449          property above
450             <excludes>
451               <exclude>**/gen/**</exclude>
452               <exclude>**/generated-sources/**</exclude>
453               <exclude>**/yang-gen/**</exclude>
454               <exclude>**/pax/**</exclude>
455             </excludes>
456           </configuration>
457           <executions>
458             
459         Prepares the property pointing to the JaCoCo runtime agent which
460         is passed as VM argument when Maven the Surefire plugin is executed.
461        
462             <execution>
463               <id>pre-unit-test</id>
464               <goals>
465                 <goal>prepare-agent</goal>
466               </goals>
467               <configuration>
468                 Sets the path to the file which contains the execution data.
469                 <destFile>${project.build.directory}/code-coverage/jacoco-ut.exec</destFile>
470                 
471             Sets the name of the property containing the settings
472             for JaCoCo runtime agent.
473        
474                 <propertyName>surefireArgLine</propertyName>
475               </configuration>
476             </execution>
477             
478         Ensures that the code coverage report for unit tests is created after
479         unit tests have been run.
480        
481             <execution>
482               <id>post-unit-test</id>
483               <phase>test</phase>
484               <goals>
485                 <goal>report</goal>
486               </goals>
487               <configuration>
488                 Sets the path to the file which contains the execution data.
489                 <dataFile>${project.build.directory}/code-coverage/jacoco-ut.exec</dataFile>
490                 Sets the output directory for the code coverage report.
491                 <outputDirectory>${project.reporting.outputDirectory}/jacoco-ut</outputDirectory>
492               </configuration>
493             </execution>
494             <execution>
495               <id>pre-integration-test</id>
496               <phase>pre-integration-test</phase>
497               <goals>
498                 <goal>prepare-agent</goal>
499               </goals>
500               <configuration>
501                 Sets the path to the file which contains the execution data.
502                 <destFile>${project.build.directory}/code-coverage/jacoco-it.exec</destFile>
503                 
504             Sets the name of the property containing the settings
505             for JaCoCo runtime agent.
506        
507                 <propertyName>failsafeArgLine</propertyName>
508               </configuration>
509             </execution>
510             
511         Ensures that the code coverage report for integration tests after
512         integration tests have been run.
513        
514             <execution>
515               <id>post-integration-test</id>
516               <phase>post-integration-test</phase>
517               <goals>
518                 <goal>report</goal>
519               </goals>
520               <configuration>
521                 Sets the path to the file which contains the execution data.
522                 <dataFile>${project.build.directory}/code-coverage/jacoco-it.exec</dataFile>
523                 Sets the output directory for the code coverage report.
524                 <outputDirectory>${project.reporting.outputDirectory}/jacoco-it</outputDirectory>
525               </configuration>
526             </execution>
527           </executions>
528         </plugin>               
529                  --></plugins>
530         </build>
531
532         <!-- <profiles> <profile> <id>jenkins</id> <activation> <property> <name>env.BUILD_NUMBER</name> 
533                 </property> </activation> <build> <plugins> <plugin> <groupId>org.codehaus.mojo</groupId> 
534                 <artifactId>cobertura-maven-plugin</artifactId> </plugin> <plugin> <groupId>com.att.aft.swm</groupId> 
535                 <artifactId>swm-plugin</artifactId> <version>1.4.4.12</version> <configuration> 
536                 <distFilesRootDirPath>/opt/app/dmaap/msgrtr/jenkinsbuild</distFilesRootDirPath> 
537                 <version>${project.version}-${env.BUILD_NUMBER}</version> <scriptExcludes> 
538                 <scriptExclude>**/swmpkgclean.sh</scriptExclude> </scriptExcludes> </configuration> 
539                 <executions> <execution> <id>pkgstage</id> <goals> <goal>pkgstage</goal> 
540                 </goals> </execution> <execution> <id>pkgcreate</id> <goals> <goal>pkgcreate</goal> 
541                 </goals> </execution> <execution> <id>pkginstall</id> <goals> <goal>install</goal> 
542                 </goals> <configuration> <componentName>com.att.nsa:msgrtr</componentName> 
543                 <version>${project.version}-${env.BUILD_NUMBER}</version> <waitTimeMins>4</waitTimeMins> 
544                 <properties> <property> <name>overrideDependencyConflicts</name> <value>true</value> 
545                 </property> <property> <name>AFTSWM_NOTIFY_ADDRESSES</name> <value>mailto:rs857c@att.com</value> 
546                 </property> </properties> </configuration> </execution> </executions> </plugin> 
547                 <plugin> <artifactId>maven-antrun-plugin</artifactId> <executions> <execution> 
548                 <phase>package</phase> <configuration> <tasks> <copy file="./src/main/scripts/swmpkgclean.sh" 
549                 toDir="./target" /> </tasks> </configuration> <goals> <goal>run</goal> </goals> 
550                 </execution> </executions> </plugin> <plugin> <groupId>org.apache.maven.plugins</groupId> 
551                 <artifactId>maven-deploy-plugin</artifactId> <version>2.5</version> <configuration> 
552                 <skip>true</skip> </configuration> </plugin> </plugins> </build> </profile> 
553                 </profiles> -->
554 </project>