Fix for Penetration test _ Session and cookie management
[vid.git] / epsdk-app-onap / pom.xml
1 <?xml version="1.0"?>
2 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
3          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
4     <modelVersion>4.0.0</modelVersion>
5
6     <!-- This is the Maven project object model (POM) file for the open-source
7         SDK web app. This is NOT the Portal - but it is developed and supported by
8         the Portal team. -->
9     <groupId>org.onap.vid</groupId>
10     <artifactId>epsdk-app-onap</artifactId>
11     <version>8.0.2-SNAPSHOT</version>
12     <packaging>war</packaging>
13     <name>ECOMP SDK Webapp for OpenSource</name>
14     <description>ECOMP SDK Web Application for public release</description>
15
16     <parent>
17         <groupId>org.onap.oparent</groupId>
18         <artifactId>oparent</artifactId>
19         <version>2.1.0</version>
20         <relativePath/>
21     </parent>
22
23     <properties>
24         <encoding>UTF-8</encoding>
25         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
26         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
27         <epsdk.version>2.6.0</epsdk.version>
28         <epsdk.overlay.version>2.5.0</epsdk.overlay.version>
29         <jaxb.version>2.3.2</jaxb.version>
30         <jackson.version>2.10.2</jackson.version>
31         <jackson.databind.version>2.10.2</jackson.databind.version>
32         <springframework.version>5.2.3.RELEASE</springframework.version>
33         <!-- epsdk-core is importing this class, which is only on spring-orm 4 but not in orm 5:
34          org.springframework.orm.hibernate4.HibernateTransactionManager
35          so following orm.version lets epsdk-core find it -->
36         <springframework.orm.version>4.3.22.RELEASE</springframework.orm.version>
37         <hibernate.version>4.3.11.Final</hibernate.version>
38         <!-- Skip assembling the zip; assemble via mvn -Dskipassembly=false .. -->
39         <skipassembly>true</skipassembly>
40         <nexusproxy>https://nexus.onap.org</nexusproxy>
41         <snapshotNexusPath>content/repositories/snapshots/</snapshotNexusPath>
42         <releaseNexusPath>content/repositories/releases/</releaseNexusPath>
43         <stagingNexusPath>content/repositories/staging/</stagingNexusPath>
44         <sitePath>content/sites/site/org/onap/vid/${project.version}</sitePath>
45
46         <!-- SONAR -->
47         <sonar.java.coveragePlugin>jacoco</sonar.java.coveragePlugin>
48         <sonar.surefire.reportPaths>${project.build.directory}/surefire-reports</sonar.surefire.reportPaths>
49         <sonar.projectVersion>${project.version}</sonar.projectVersion>
50         <!-- ignore all .js files on sonar coverage report -->
51         <sonar.coverage.exclusions>**/webapp/**/*,**/*.js</sonar.coverage.exclusions>
52     </properties>
53
54     <repositories>
55         <repository>
56             <id>ecomp-releases</id>
57             <name>VID Release Repository</name>
58             <url>${nexusproxy}/${releaseNexusPath}</url>
59         </repository>
60         <repository>
61             <id>ecomp-snapshots</id>
62             <name>VID Snapshot Repository</name>
63             <url>${nexusproxy}/${snapshotNexusPath}</url>
64         </repository>
65         <repository>
66             <id>ecomp-staging</id>
67             <name>VID Staging Repository</name>
68             <url>${nexusproxy}/${stagingNexusPath}</url>
69         </repository>
70         <repository>
71             <!-- Snapshots repository has ECOMP snapshot artifacts -->
72             <id>oss-snapshots</id>
73             <name>oss Central - Snapshots</name>
74             <url>https://oss.sonatype.org/service/local/repositories/releases/content/</url>
75         </repository>
76     </repositories>
77     <distributionManagement>
78         <repository>
79             <id>ecomp-releases</id>
80             <name>VID Release Repository</name>
81             <url>${nexusproxy}/${releaseNexusPath}</url>
82         </repository>
83         <snapshotRepository>
84             <id>ecomp-snapshots</id>
85             <name>VID Snapshot Repository</name>
86             <url>${nexusproxy}/${snapshotNexusPath}</url>
87         </snapshotRepository>
88         <!-- added for javadoc -->
89         <site>
90             <id>ecomp-site</id>
91             <url>dav:${nexusproxy}/${sitePath}</url>
92         </site>
93     </distributionManagement>
94
95     <profiles>
96         <!-- disable doclint, a new feature in Java 8, when generating javadoc -->
97         <profile>
98             <id>doclint-java8-disable</id>
99             <activation>
100                 <jdk>[1.8,)</jdk>
101             </activation>
102             <build>
103                 <plugins>
104                     <plugin>
105                         <groupId>org.apache.maven.plugins</groupId>
106                         <artifactId>maven-javadoc-plugin</artifactId>
107                         <version>2.10.4</version>
108                         <configuration>
109                             <additionalparam>-Xdoclint:none</additionalparam>
110                         </configuration>
111                     </plugin>
112                 </plugins>
113             </build>
114         </profile>
115     </profiles>
116
117     <build>
118         <finalName>vid</finalName>
119         <plugins>
120             <!-- Compile to Java 1.8 class output format -->
121             <plugin>
122                 <groupId>org.apache.maven.plugins</groupId>
123                 <artifactId>maven-compiler-plugin</artifactId>
124                 <version>3.8.1</version>
125                 <configuration>
126                     <source>1.8</source>
127                     <target>1.8</target>
128                 </configuration>
129             </plugin>
130
131             <plugin>
132                 <groupId>org.apache.maven.plugins</groupId>
133                 <artifactId>maven-surefire-plugin</artifactId>
134                 <version>2.22.2</version>
135                 <configuration>
136                     <includes>
137                         <include>**/Test*.java</include>
138                         <include>**/*Test.java</include>
139                         <include>**/*TestCase.java</include>
140                     </includes>
141                     <additionalClasspathElements>
142                         <additionalClasspathElement>${basedir}/war</additionalClasspathElement>
143                     </additionalClasspathElements>
144                     <systemPropertyVariables>
145                         <container.classpath>classpath:</container.classpath>
146                     </systemPropertyVariables>
147                     <useSystemClassLoader>false</useSystemClassLoader>
148                     <properties>
149                         <property>
150                             <name>usedefaultlisteners</name>
151                             <value>false</value>
152                         </property>
153                     </properties>
154                 </configuration>
155             </plugin>
156
157             <!-- add version number to manifest -->
158             <plugin>
159                 <groupId>org.apache.maven.plugins</groupId>
160                 <artifactId>maven-war-plugin</artifactId>
161                 <version>3.2.3</version>
162                 <configuration>
163                     <archive>
164                         <manifest>
165                             <addDefaultImplementationEntries>true</addDefaultImplementationEntries>
166                         </manifest>
167                         <manifestEntries>
168                             <Build-Number>${project.version}</Build-Number>
169                             <Build-Time>${maven.build.timestamp}</Build-Time>
170                         </manifestEntries>
171                     </archive>
172                     <overlays>
173                         <overlay>
174                             <groupId>org.onap.vid</groupId>
175                             <artifactId>vid-app-common</artifactId>
176                         </overlay>
177                         <overlay>
178                             <groupId>org.onap.portal.sdk</groupId>
179                             <artifactId>epsdk-app-overlay</artifactId>
180                         </overlay>
181                         <overlay>
182                             <groupId>org.onap.vid</groupId>
183                             <artifactId>vid-webpack-master</artifactId>
184                         </overlay>
185                     </overlays>
186                 </configuration>
187             </plugin>
188
189             <plugin>
190                 <groupId>org.apache.maven.plugins</groupId>
191                 <artifactId>maven-assembly-plugin</artifactId>
192                 <version>3.2.0</version>
193                 <configuration>
194                     <skipAssembly>${skipassembly}</skipAssembly>
195                     <descriptors>
196                         <descriptor>${basedir}/distribution.xml</descriptor>
197                     </descriptors>
198                 </configuration>
199                 <executions>
200                     <execution>
201                         <id>make-assembly</id>
202                         <phase>package</phase>
203                         <goals>
204                             <goal>single</goal>
205                         </goals>
206                     </execution>
207                 </executions>
208             </plugin>
209             <plugin>
210                 <groupId>org.apache.maven.plugins</groupId>
211                 <artifactId>maven-site-plugin</artifactId>
212                 <version>3.6</version>
213                 <dependencies>
214                     <dependency>
215                         <groupId>org.apache.maven.wagon</groupId>
216                         <artifactId>wagon-webdav-jackrabbit</artifactId>
217                         <version>2.10</version>
218                     </dependency>
219                 </dependencies>
220             </plugin>
221             <plugin>
222                 <groupId>org.sonarsource.scanner.maven</groupId>
223                 <artifactId>sonar-maven-plugin</artifactId>
224                 <version>3.6.0.1398</version>
225             </plugin>
226             <plugin>
227                 <groupId>org.jacoco</groupId>
228                 <artifactId>jacoco-maven-plugin</artifactId>
229                 <version>0.8.4</version>
230                 <executions>
231                     <execution>
232                         <id>default-prepare-agent</id>
233                         <goals>
234                             <goal>prepare-agent</goal>
235                         </goals>
236                     </execution>
237                     <execution>
238                         <id>default-report</id>
239                         <goals>
240                             <goal>report</goal>
241                         </goals>
242                     </execution>
243                 </executions>
244             </plugin>
245
246         </plugins>
247     </build>
248
249     <reporting>
250         <plugins>
251             <plugin>
252                 <groupId>org.apache.maven.plugins</groupId>
253                 <artifactId>maven-javadoc-plugin</artifactId>
254                 <version>2.10.4</version>
255                 <configuration>
256                     <failOnError>false</failOnError>
257                     <doclet>org.umlgraph.doclet.UmlGraphDoc</doclet>
258                     <docletArtifact>
259                         <groupId>org.umlgraph</groupId>
260                         <artifactId>umlgraph</artifactId>
261                         <version>5.6</version>
262                     </docletArtifact>
263                     <additionalparam>-views</additionalparam>
264                     <useStandardDocletOptions>true</useStandardDocletOptions>
265                 </configuration>
266             </plugin>
267         </plugins>
268     </reporting>
269     <dependencies>
270         <!-- SDK overlay war -->
271         <dependency>
272             <groupId>org.onap.portal.sdk</groupId>
273             <artifactId>epsdk-app-overlay</artifactId>
274             <version>${epsdk.overlay.version}</version>
275             <type>war</type>
276         </dependency>
277         <dependency>
278             <groupId>org.onap.portal.sdk</groupId>
279             <artifactId>epsdk-app-common</artifactId>
280             <version>${epsdk.version}</version>
281             <type>jar</type>
282             <exclusions>
283                 <exclusion>
284                     <groupId>org.apache.logging.log4j</groupId>
285                     <artifactId>log4j</artifactId>
286                 </exclusion>
287                 <exclusion>
288                     <groupId>org.apache.logging.log4j</groupId>
289                     <artifactId>log4j-api</artifactId>
290                 </exclusion>
291             </exclusions>
292         </dependency>
293         <dependency>
294             <groupId>org.onap.vid</groupId>
295             <artifactId>vid-app-common</artifactId>
296             <version>${project.version}</version>
297             <type>war</type>
298         </dependency>
299         <dependency>
300             <groupId>org.onap.vid</groupId>
301             <artifactId>vid-app-common</artifactId>
302             <version>${project.version}</version>
303             <type>jar</type>
304             <classifier>classes</classifier>
305         </dependency>
306         <dependency>
307             <groupId>org.onap.vid</groupId>
308             <artifactId>vid-webpack-master</artifactId>
309             <version>${project.version}</version>
310             <type>war</type>
311         </dependency>
312         <!-- SDK components -->
313         <dependency>
314             <groupId>org.onap.portal.sdk</groupId>
315             <artifactId>epsdk-core</artifactId>
316             <version>${epsdk.version}</version>
317             <exclusions>
318                 <exclusion>
319                     <groupId>org.apache.logging.log4j</groupId>
320                     <artifactId>log4j</artifactId>
321                 </exclusion>
322                 <exclusion>
323                     <groupId>org.apache.logging.log4j</groupId>
324                     <artifactId>log4j-api</artifactId>
325                 </exclusion>
326             </exclusions>
327         </dependency>
328         <dependency>
329             <groupId>org.onap.portal.sdk</groupId>
330             <artifactId>epsdk-analytics</artifactId>
331             <version>${epsdk.version}</version>
332             <exclusions>
333                 <exclusion>
334                     <groupId>com.lowagie</groupId>
335                     <artifactId>itext</artifactId>
336                 </exclusion>
337             </exclusions>
338         </dependency>
339         <dependency>
340             <groupId>org.onap.portal.sdk</groupId>
341             <artifactId>epsdk-workflow</artifactId>
342             <version>${epsdk.version}</version>
343         </dependency>
344         <dependency>
345             <groupId>com.att.eelf</groupId>
346             <artifactId>eelf-core</artifactId>
347             <version>1.0.0</version>
348         </dependency>
349         <!-- Mapper -->
350         <dependency>
351             <groupId>com.fasterxml.jackson.core</groupId>
352             <artifactId>jackson-annotations</artifactId>
353             <version>${jackson.version}</version>
354         </dependency>
355         <dependency>
356             <groupId>com.fasterxml.jackson.core</groupId>
357             <artifactId>jackson-core</artifactId>
358             <version>${jackson.version}</version>
359         </dependency>
360         <dependency>
361             <groupId>com.fasterxml.jackson.core</groupId>
362             <artifactId>jackson-databind</artifactId>
363             <version>${jackson.databind.version}</version>
364         </dependency>
365         <dependency>
366             <groupId>com.fasterxml.jackson.module</groupId>
367             <artifactId>jackson-module-kotlin</artifactId>
368             <version>${jackson.version}</version>
369         </dependency>
370         <!-- jackson-dataformat-* are to override elasticsearch-2.2.0 deps hell -->
371         <!-- (elasticsearch is an epsdk-app-common-2.4.0 dep) -->
372         <dependency>
373             <groupId>com.fasterxml.jackson.dataformat</groupId>
374             <artifactId>jackson-dataformat-smile</artifactId>
375             <version>${jackson.version}</version>
376         </dependency>
377         <dependency>
378             <groupId>com.fasterxml.jackson.dataformat</groupId>
379             <artifactId>jackson-dataformat-yaml</artifactId>
380             <version>${jackson.version}</version>
381         </dependency>
382         <dependency>
383             <groupId>com.fasterxml.jackson.dataformat</groupId>
384             <artifactId>jackson-dataformat-cbor</artifactId>
385             <version>${jackson.version}</version>
386         </dependency>
387         <!-- c3p0 is to override epsdk-app-common's c3p0 0.9.5.2 vulnerability -->
388         <dependency>
389             <groupId>com.mchange</groupId>
390             <artifactId>c3p0</artifactId>
391             <version>0.9.5.5</version>
392         </dependency>
393         <dependency>
394             <groupId>io.searchbox</groupId>
395             <artifactId>jest</artifactId>
396             <version>6.3.1</version>
397             <exclusions>
398                 <exclusion>
399                     <groupId>commons-logging</groupId>
400                     <artifactId>commons-logging</artifactId>
401                 </exclusion>
402             </exclusions>
403         </dependency>
404         <dependency>
405             <groupId>javax.servlet</groupId>
406             <artifactId>javax.servlet-api</artifactId>
407             <version>4.0.1</version>
408         </dependency>
409         <dependency>
410             <groupId>junit</groupId>
411             <artifactId>junit</artifactId>
412             <version>4.12</version>
413         </dependency>
414         <dependency>
415             <groupId>org.json</groupId>
416             <artifactId>json</artifactId>
417             <version>20190722</version>
418         </dependency>
419         <dependency>
420             <groupId>org.liquibase</groupId>
421             <artifactId>liquibase-core</artifactId>
422             <version>3.7.0</version>
423         </dependency>
424         <dependency>
425             <groupId>org.quartz-scheduler</groupId>
426             <artifactId>quartz</artifactId>
427             <version>2.3.1</version>
428             <exclusions>
429                 <!-- exclude 0.9.1.1 to avoid dupe of com.mchange:c3p0:0.9.2.1 -->
430                 <exclusion>
431                     <groupId>c3p0</groupId>
432                     <artifactId>c3p0</artifactId>
433                 </exclusion>
434             </exclusions>
435         </dependency>
436         <!-- bridge to implement commons-logging using slf4j -->
437         <dependency>
438             <groupId>org.slf4j</groupId>
439             <artifactId>jcl-over-slf4j</artifactId>
440             <version>1.7.27</version>
441         </dependency>
442
443         <!-- springframework to override epsdk-app-common's and epsdk-core's versions -->
444         <dependency>
445             <groupId>org.springframework</groupId>
446             <artifactId>spring-core</artifactId>
447             <version>${springframework.version}</version>
448             <exclusions>
449                 <exclusion>
450                     <groupId>commons-logging</groupId>
451                     <artifactId>commons-logging</artifactId>
452                 </exclusion>
453             </exclusions>
454         </dependency>
455         <dependency>
456             <groupId>org.springframework</groupId>
457             <artifactId>spring-test</artifactId>
458             <version>${springframework.version}</version>
459         </dependency>
460         <dependency>
461             <groupId>org.springframework</groupId>
462             <artifactId>spring-tx</artifactId>
463             <version>${springframework.version}</version>
464         </dependency>
465         <dependency>
466             <groupId>org.springframework</groupId>
467             <artifactId>spring-web</artifactId>
468             <version>${springframework.version}</version>
469         </dependency>
470         <dependency>
471             <groupId>org.springframework</groupId>
472             <artifactId>spring-webmvc</artifactId>
473             <version>${springframework.version}</version>
474         </dependency>
475         <dependency>
476             <groupId>org.springframework</groupId>
477             <artifactId>spring-context-support</artifactId>
478             <version>${springframework.version}</version>
479         </dependency>
480         <dependency>
481             <groupId>org.springframework</groupId>
482             <artifactId>spring-orm</artifactId>
483             <version>${springframework.orm.version}</version>
484         </dependency>
485         <dependency>
486             <groupId>org.springframework</groupId>
487             <artifactId>spring-aop</artifactId>
488             <version>${springframework.version}</version>
489         </dependency>
490
491         <!-- https://eclipse-ee4j.github.io/jaxb-ri/#maven-artifacts -->
492         <!-- API -->
493         <dependency>
494             <groupId>jakarta.xml.bind</groupId>
495             <artifactId>jakarta.xml.bind-api</artifactId>
496             <version>${jaxb.version}</version>
497         </dependency>
498         <!-- Runtime -->
499         <dependency>
500             <groupId>org.glassfish.jaxb</groupId>
501             <artifactId>jaxb-runtime</artifactId>
502             <version>${jaxb.version}</version>
503         </dependency>
504
505     </dependencies>
506 </project>