MavenRepositories
- Tom Zeller
- Daniel Fisher
- Scott Cantor
The following information applies to any third party developers working with Shibboleth Project artifacts, including OpenSAML. For project team members, see the https://shibboleth.atlassian.net/wiki/spaces/DEV/pages/1123450991 topic for more complete documentation allowing deployment of artifacts.
Shibboleth Maven Repository URLs
Shibboleth artifacts :
https://build.shibboleth.net/maven/releases
Shibboleth snapshot artifacts :
https://build.shibboleth.net/maven/snapshots
Third-party artifacts not in Central :
https://build.shibboleth.net/maven/thirdparty
Third-party snapshot artifacts not in Central :
https://build.shibboleth.net/maven/thirdparty-snapshots
Maven User Settings File (~/.m2/settings.xml)
Here is an example Maven user settings file (~/.m2/settings.xml) :
<?xml version="1.0" encoding="UTF-8"?>
<settings xmlns="http://maven.apache.org/SETTINGS/1.2.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.2.0 https://maven.apache.org/xsd/settings-1.2.0.xsd">
<activeProfiles>
<activeProfile>shibboleth-repositories</activeProfile>
</activeProfiles>
<profiles>
<profile>
<id>shibboleth-repositories</id>
<repositories>
<repository>
<id>shibboleth-releases</id>
<name>Shibboleth Releases Repository</name>
<url>https://build.shibboleth.net/maven/releases/</url>
<releases>
<enabled>true</enabled>
<checksumPolicy>warn</checksumPolicy>
</releases>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
<repository>
<id>shibboleth-snapshots</id>
<name>Shibboleth Snapshots Repository</name>
<url>https://build.shibboleth.net/maven/snapshots/</url>
<releases>
<enabled>false</enabled>
</releases>
<snapshots>
<enabled>true</enabled>
<checksumPolicy>fail</checksumPolicy>
</snapshots>
</repository>
<repository>
<id>shibboleth-thirdparty</id>
<name>Shibboleth Thirdparty Repository</name>
<url>https://build.shibboleth.net/maven/thirdparty/</url>
<releases>
<enabled>true</enabled>
<checksumPolicy>fail</checksumPolicy>
</releases>
<snapshots>
<enabled>false</enabled>
</snapshots>
</repository>
<repository>
<id>shibboleth-thirdparty-snapshots</id>
<name>Shibboleth Thirdparty Snapshots Repository</name>
<url>https://build.shibboleth.net/maven/thirdparty-snapshots/</url>
<releases>
<enabled>false</enabled>
</releases>
<snapshots>
<enabled>true</enabled>
<checksumPolicy>warn</checksumPolicy>
</snapshots>
</repository>
</repositories>
<pluginRepositories>
<pluginRepository>
<id>shibboleth-releases</id>
<name>Shibboleth Releases Repository</name>
<url>https://build.shibboleth.net/maven/releases/</url>
<releases>
<enabled>true</enabled>
<checksumPolicy>fail</checksumPolicy>
</releases>
<snapshots>
<enabled>false</enabled>
</snapshots>
</pluginRepository>
<pluginRepository>
<id>shibboleth-snapshots</id>
<name>Shibboleth Snapshots Repository</name>
<url>https://build.shibboleth.net/maven/snapshots/</url>
<releases>
<enabled>false</enabled>
</releases>
<snapshots>
<enabled>true</enabled>
<checksumPolicy>fail</checksumPolicy>
</snapshots>
</pluginRepository>
</pluginRepositories>
</profile>
</profiles>
<!-- This HTTPS mirror of Central may be required when building projects based on the V7 parent project.
For example, net.shibboleth.utilities.jetty9:jetty94-dta-ssl:1.0.0 which depends on net.shibboleth:parent:7.11.0
This is because the V7 parent project defines the Central repository URL using HTTP instead of HTTPS.
See https://maven.apache.org/docs/3.8.1/release-notes.html#how-to-fix-when-i-get-a-http-repository-blocked
-->
<!--
<mirrors>
<mirror>
<id>central-https</id>
<name>HTTPS mirror of HTTP Central</name>
<url>https://repo.maven.apache.org/maven2</url>
<mirrorOf>central</mirrorOf>
</mirror>
</mirrors>
-->
</settings>Shibboleth Thirdparty Maven Repository
The Shibboleth thirdparty Maven repository contains thirdparty artifacts that are not available from the Maven Central Repository.
As of 24 January 2022, the thirdparty repository only contains com/duosecurity. Previously it hosted the entire supply-chain for Shibboleth Java projects.
Old Shibboleth Maven Repository URLs
As of 20 January 2022, the following Maven repository URLs are being redirected :
https://build.shibboleth.net/nexus/content/groups/public
to
https://build.shibboleth.net/maven/releases
https://build.shibboleth.net/nexus/content/repositories/releases
to
https://build.shibboleth.net/maven/releases
https://build.shibboleth.net/nexus/content/repositories/snapshots
to
https://build.shibboleth.net/maven/snapshots
https://build.shibboleth.net/nexus/content/repositories/thirdparty-snapshots
to
https://build.shibboleth.net/maven/thirdparty-snapshots