Fix vulnerability in code where password is
[music.git] / jar / pom.xml
1 <!-- 
2  ============LICENSE_START==========================================
3  org.onap.music
4  ===================================================================
5   Copyright (c) 2017 AT&T Intellectual Property
6  ===================================================================
7   Licensed under the Apache License, Version 2.0 (the "License");
8   you may not use this file except in compliance with the License.
9   You may obtain a copy of the License at
10  
11      http://www.apache.org/licenses/LICENSE-2.0
12  
13   Unless required by applicable law or agreed to in writing, software
14   distributed under the License is distributed on an "AS IS" BASIS,
15   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16   See the License for the specific language governing permissions and
17   limitations under the License.
18  
19  ============LICENSE_END=============================================
20  ====================================================================
21 -->  
22 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
23     xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
24     <modelVersion>4.0.0</modelVersion>
25     <groupId>org.onap.music</groupId>
26     <artifactId>MUSIC</artifactId>
27     <packaging>jar</packaging>
28     <version>2.5.9</version>
29     <description>
30             This is the MUSIC REST interface, packaged as a war file.
31     </description>
32
33     <parent>
34         <groupId>org.onap.oparent</groupId>
35         <artifactId>oparent</artifactId>
36         <version>2.0.0</version>
37         <relativePath />
38     </parent>
39
40     <properties>
41         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
42         <jersey1.version>1.19</jersey1.version>
43         <jersey2.version>2.25.1</jersey2.version>
44         <jaxrs.version>2.0.1</jaxrs.version>
45         <cassandra.version>3.4.0</cassandra.version>
46         <zookeeper.version>3.4.11</zookeeper.version>
47         <onap.nexus.url>https://nexus.onap.org</onap.nexus.url>
48
49         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
50         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
51         <!--nexus -->
52         <nexusproxy>https://nexus.onap.org</nexusproxy>
53         <snapshotNexusPath>/content/repositories/snapshots/</snapshotNexusPath>
54         <releaseNexusPath>/content/repositories/releases/</releaseNexusPath>
55         <stagingNexusPath>/content/repositories/staging/</stagingNexusPath>
56         <sitePath>/content/sites/site/org/onap/music/${project.version}</sitePath>
57         <!--maven -->
58         <timestamp>${maven.build.timestamp}</timestamp>
59         <maven.build.timestamp.format>yyyy.MM.dd.HH.mm</maven.build.timestamp.format>
60         <!--docker -->
61         <docker.tag>${project.version}-${timestamp}</docker.tag>
62         <docker.latest.tag>${project.version}-latest</docker.latest.tag>
63     </properties>
64
65     <repositories>
66         <repository>
67             <id>ecomp-releases</id>
68             <name>ECOMP Release Repository</name>
69             <url>${onap.nexus.url}/${releaseNexusPath}</url>
70         </repository>
71         <repository>
72             <id>ecomp-snapshots</id>
73             <name>Snapshot Repository</name>
74             <url>${nexusproxy}/${snapshotNexusPath}</url>
75         </repository>
76         <repository>
77             <id>ecomp-staging</id>
78             <name>Staging Repository</name>
79             <url>${nexusproxy}/${stagingNexusPath}</url>
80         </repository>
81     </repositories>
82
83     <build>
84         <finalName>MUSIC</finalName>
85         <sourceDirectory>src/main/java</sourceDirectory>
86         <outputDirectory>src/main/webapp/WEB-INF/classes</outputDirectory>
87         <testSourceDirectory>src/test/java</testSourceDirectory>
88         <testOutputDirectory>target/test-classes</testOutputDirectory>
89         <defaultGoal>validate</defaultGoal>
90         <resources>
91             <resource>
92                 <directory>src/main/resources</directory>
93                 <filtering>true</filtering>
94             </resource>
95         </resources>
96         <plugins>
97             <plugin>
98                 <artifactId>maven-eclipse-plugin</artifactId>
99                 <version>2.9</version>
100                 <configuration>
101                     <additionalProjectnatures>
102                         <projectnature>org.springframework.ide.eclipse.core.springnature</projectnature>
103                     </additionalProjectnatures>
104                     <additionalBuildcommands>
105                         <buildcommand>org.springframework.ide.eclipse.core.springbuilder</buildcommand>
106                     </additionalBuildcommands>
107                     <downloadSources>true</downloadSources>
108                     <downloadJavadocs>true</downloadJavadocs>
109                 </configuration>
110             </plugin>
111             <plugin>
112                 <groupId>org.apache.maven.plugins</groupId>
113                 <artifactId>maven-compiler-plugin</artifactId>
114                 <version>3.5.1</version>
115                 <configuration>
116                     <source>1.7</source>
117                     <target>1.7</target>
118                     <excludes>
119                          <exclude>jar/**</exclude>
120                        </excludes>
121                 </configuration>
122             </plugin>
123             <plugin>
124                 <artifactId>maven-war-plugin</artifactId>
125                 <version>2.4</version>
126                 <configuration>
127                     <warSourceDirectory>WebContent</warSourceDirectory>
128                 </configuration>
129             </plugin>
130             <plugin>
131                 <groupId>org.apache.maven.plugins</groupId>
132                 <artifactId>maven-jar-plugin</artifactId>
133                 <version>2.4</version>
134                 <executions>
135                     <execution>
136                         <id>make-a-jar</id>
137                         <phase>compile</phase>
138                         <goals>
139                             <goal>jar</goal>
140                         </goals>
141                         <configuration>
142                             <excludes>
143                                 <exclude>**/*.xml</exclude>
144                                 <exclude>**/*.properties</exclude>
145                                 <exclude>**/Sample*</exclude>
146                             </excludes>
147                         </configuration>
148                     </execution>
149                 </executions>
150             </plugin>
151             <plugin>
152                 <groupId>org.apache.maven.plugins</groupId>
153                 <artifactId>maven-install-plugin</artifactId>
154                 <version>2.4</version>
155                 <executions>
156                     <execution>
157                         <phase>install</phase>
158                         <goals>
159                             <goal>install-file</goal>
160                         </goals>
161                         <configuration>
162                             <packaging>jar</packaging>
163                             <artifactId>${project.artifactId}</artifactId>
164                             <groupId>${project.groupId}</groupId>
165                             <version>${project.version}</version>
166                             <file>${project.build.directory}/${project.artifactId}.jar</file>
167                         </configuration>
168                     </execution>
169                 </executions>
170             </plugin>
171         </plugins>
172     </build>
173
174     <dependencies>
175         <!-- Development -->
176         <dependency>
177             <groupId>javax.servlet</groupId>
178             <artifactId>servlet-api</artifactId>
179             <version>2.4</version>
180             <scope>provided</scope>
181         </dependency>
182         <dependency>
183             <groupId>javax.servlet</groupId>
184             <artifactId>javax.servlet-api</artifactId>
185             <version>3.0.1</version>
186             <scope>provided</scope>
187         </dependency>
188         <!-- /Development -->
189         <!-- Logging -->
190         <dependency>
191             <groupId>ch.qos.logback</groupId>
192             <artifactId>logback-core</artifactId>
193             <version>1.2.3</version>
194             <exclusions>
195                 <exclusion>
196                     <groupId>org.slf4j</groupId>
197                     <artifactId>slf4j-log4j12</artifactId>
198                 </exclusion>
199             </exclusions>
200         </dependency>
201         <dependency>
202             <groupId>ch.qos.logback</groupId>
203             <artifactId>logback-classic</artifactId>
204             <version>1.2.3</version>
205             <exclusions>
206                 <exclusion>
207                     <groupId>org.slf4j</groupId>
208                     <artifactId>slf4j-log4j12</artifactId>
209                 </exclusion>
210             </exclusions>
211         </dependency>
212         <dependency>
213             <groupId>com.att.eelf</groupId>
214             <artifactId>eelf-core</artifactId>
215             <version>1.0.1-oss</version>
216         </dependency>
217         <!-- End Logging -->
218         
219         <!-- Cassandra -->       
220         <dependency>
221             <groupId>com.datastax.cassandra</groupId>
222             <artifactId>cassandra-driver-core</artifactId>
223             <version>${cassandra.version}</version>
224         </dependency>
225         <!-- /Cassandra -->       
226         
227         <!-- Zookeeper -->
228         <dependency>
229             <groupId>org.apache.zookeeper</groupId>
230             <artifactId>zookeeper</artifactId>
231             <version>${zookeeper.version}</version>
232             <exclusions>
233                 <exclusion>
234                     <groupId>org.slf4j</groupId>
235                     <artifactId>slf4j-log4j12</artifactId>
236                 </exclusion>
237             </exclusions>
238         </dependency>
239         <!-- /Zookeeper -->
240         
241         <!-- Jersey -->
242         <dependency>
243             <groupId>com.sun.jersey</groupId>
244             <artifactId>jersey-client</artifactId>
245             <version>${jersey1.version}</version>
246         </dependency>
247         <dependency>
248             <groupId>com.sun.jersey</groupId>
249             <artifactId>jersey-server</artifactId>
250             <version>${jersey1.version}</version>
251         </dependency>
252         <dependency>
253             <groupId>com.sun.jersey</groupId>
254             <artifactId>jersey-json</artifactId>
255             <version>${jersey1.version}</version>
256         </dependency>
257         <dependency> 
258             <groupId>com.sun.jersey</groupId> 
259             <artifactId>jersey-servlet</artifactId> 
260             <version>${jersey1.version}</version> 
261         </dependency>
262         <!-- /Jersey -->
263
264         <dependency>
265             <groupId>org.apache.commons</groupId>
266             <artifactId>commons-jcs-core</artifactId>
267             <version>2.2</version>
268         </dependency>
269         <dependency>
270             <groupId>commons-codec</groupId>
271             <artifactId>commons-codec</artifactId>
272             <version>1.11</version>
273         </dependency>
274
275         <!-- Testing -->
276         <dependency>
277             <groupId>junit</groupId>
278             <artifactId>junit</artifactId>
279             <version>4.12</version>
280             <scope>test</scope>
281         </dependency>
282         <dependency>
283             <groupId>org.cassandraunit</groupId>
284             <artifactId>cassandra-unit</artifactId>
285             <version>3.3.0.2</version>
286             <scope>test</scope>
287         </dependency>
288         <dependency>
289             <groupId>org.apache.curator</groupId>
290             <artifactId>curator-test</artifactId>
291             <version>2.3.0</version>
292             <exclusions>
293                 <exclusion>
294                     <groupId>org.apache.zookeeper</groupId>
295                     <artifactId>zookeeper</artifactId>
296                 </exclusion>
297                 <exclusion>
298                     <groupId>org.slf4j</groupId>
299                     <artifactId>slf4j-log4j12</artifactId>
300                 </exclusion>
301             </exclusions>
302             <scope>test</scope>
303         </dependency>
304         <dependency>
305             <groupId>org.mockito</groupId>
306             <artifactId>mockito-all</artifactId>
307             <version>1.9.0</version>
308             <scope>test</scope>
309         </dependency>
310         <!--  /Testing -->
311         <dependency>
312             <groupId>io.netty</groupId>
313             <artifactId>netty-handler</artifactId>
314             <version>4.0.56.Final</version>
315         </dependency>
316         <dependency>
317             <groupId>com.fasterxml.jackson.core</groupId>
318             <artifactId>jackson-databind</artifactId>
319             <version>2.9.4</version>
320         </dependency>
321         <dependency>
322             <groupId>org.apache.httpcomponents</groupId>
323             <artifactId>httpclient</artifactId>
324             <version>4.5.3</version>
325         </dependency>
326         <dependency>
327             <groupId>io.swagger</groupId>
328             <artifactId>swagger-jersey-jaxrs</artifactId>
329             <version>1.5.18</version>
330         </dependency>
331         <dependency>
332             <groupId>com.google.guava</groupId>
333             <artifactId>guava</artifactId>
334             <version>19.0</version>
335         </dependency>
336         <dependency>
337             <groupId>org.mindrot</groupId>
338             <artifactId>jbcrypt</artifactId>
339             <version>0.4</version>
340         </dependency>
341         <!-- https://mvnrepository.com/artifact/commons-codec/commons-codec -->
342         <dependency>
343             <groupId>commons-codec</groupId>
344             <artifactId>commons-codec</artifactId>
345             <version>1.9</version>
346         </dependency>
347         <!-- https://mvnrepository.com/artifact/org.apache.commons/commons-lang3 -->
348         <dependency>
349             <groupId>org.apache.commons</groupId>
350             <artifactId>commons-lang3</artifactId>
351             <version>3.0</version>
352         </dependency>
353
354     </dependencies>
355
356     <reporting>
357         <plugins>
358             <plugin>
359                 <groupId>org.apache.maven.plugins</groupId>
360                 <artifactId>maven-javadoc-plugin</artifactId>
361                 <version>2.10.3</version>
362                 <configuration>
363                     <author>true</author>
364                     <breakiterator>true</breakiterator>
365                     <version>true</version>
366                     <links>
367                         <link>https://docs.oracle.com/javase/7/docs/api/</link>
368                         <link>https://tomcat.apache.org/tomcat-7.0-doc/jspapi/</link>
369                         <link>http://docs.oracle.com/javaee/7/api/</link>
370                     </links>
371                 </configuration>
372             </plugin>
373         </plugins>
374     </reporting>
375
376     <profiles>
377         <profile>
378             <id>docker</id>
379             <build>
380                 <plugins>
381                     <plugin>
382                         <groupId>io.fabric8</groupId>
383                         <artifactId>docker-maven-plugin</artifactId>
384                         <version>0.19.1</version>
385                         <configuration>
386                             <verbose>true</verbose>
387                             <apiVersion>1.23</apiVersion>
388                             <registry>nexus3.onap.org:10003</registry>
389                             <images>
390                                 <!-- MUSIC War -->
391                                 <image>
392                                     <name>onap/music/music</name>
393                                     <alias>docker_music</alias>
394                                     <build>
395                                         <cleanup>true</cleanup>
396                                         <tags>
397                                             <tag>${docker.tag}</tag>
398                                             <tag>${docker.latest.tag}</tag>
399                                         </tags>
400                                         <dockerFileDir>${project.basedir}</dockerFileDir>
401                                         <assembly>
402                                             <descriptorRef>artifact</descriptorRef>
403                                         </assembly>
404                                     </build>
405                                 </image>
406                                 <!-- Cassandra -->
407                                 <image>
408                                     <name>onap/music/cassandra_music</name>
409                                     <alias>docker_cassandra</alias>
410                                     <build>
411                                         <cleanup>true</cleanup>
412                                         <tags>
413                                             <tag>3.0-${timestamp}</tag>
414                                             <tag>3.0-latest</tag>
415                                         </tags>
416                                         <dockerFileDir>${project.basedir}/distribution/cassandra</dockerFileDir>
417                                     </build>
418                                 </image>
419                                 <!-- Zookeeper -->
420                                 <!-- <image> <name>onap/music/zookeeper_music</name> 
421                                     <alias>docker_zookeeper</alias> <build> <cleanup>true</cleanup> <tags> <tag>3.4-${timestamp}</tag> 
422                                     <tag>3.4-latest</tag> </tags> <dockerFileDir>${project.basedir}/distribution/zookeeper</dockerFileDir> 
423                                     </build> </image> -->
424                                 <!-- tomcat 8.5 -->
425                                 <!-- <image> <name>onap/music/tomcat_music</name> 
426                                     <alias>docker_tomcat</alias> <build> <cleanup>true</cleanup> <tags> <tag>8.5-${timestamp}</tag> 
427                                     <tag>8.5-latest</tag> </tags> <dockerFileDir>${project.basedir}/distribution/tomcat</dockerFileDir> 
428                                     </build> </image>\ -->
429                             </images>
430                         </configuration>
431                         <executions>
432                             <execution>
433                                 <id>clean-images</id>
434                                 <phase>pre-clean</phase>
435                                 <goals>
436                                     <goal>remove</goal>
437                                 </goals>
438                                 <configuration>
439                                     <removeAll>true</removeAll>
440                                     <image>music</image>
441                                 </configuration>
442                             </execution>
443                             <execution>
444                                 <id>generate-images</id>
445                                 <phase>package</phase>
446                                 <goals>
447                                     <goal>build</goal>
448                                 </goals>
449                             </execution>
450                             <execution>
451                                 <id>push-images</id>
452                                 <phase>deploy</phase>
453                                 <goals>
454                                     <goal>push</goal>
455                                 </goals>
456                                 <configuration>
457                                     <image>onap/music/music</image>
458                                 </configuration>
459                             </execution>
460                         </executions>
461                     </plugin>
462                 </plugins>
463             </build>
464         </profile>
465     </profiles>
466     <distributionManagement>
467         <repository>
468             <id>ecomp-releases</id>
469             <name>Release Repository</name>
470             <url>${nexusproxy}/${releaseNexusPath}</url>
471         </repository>
472         <snapshotRepository>
473             <id>ecomp-snapshots</id>
474             <name>Snapshot Repository</name>
475             <url>${nexusproxy}/${snapshotNexusPath}</url>
476         </snapshotRepository>
477         <!-- added for javadoc -->
478         <site>
479             <id>ecomp-site</id>
480             <url>dav:${nexusproxy}${sitePath}</url>
481         </site>
482     </distributionManagement>
483 </project>