MavenRepositories

The following information applies to any third party developers working with Shibboleth Project artifacts, including OpenSAML. For project team members, see the https://shibboleth.atlassian.net/wiki/spaces/DEV/pages/1123450991 topic for more complete documentation allowing deployment of artifacts.

Shibboleth Maven Repository URLs

Shibboleth artifacts :
https://build.shibboleth.net/maven/releases

Shibboleth snapshot artifacts :
https://build.shibboleth.net/maven/snapshots

Third-party artifacts not in Central :
https://build.shibboleth.net/maven/thirdparty

Third-party snapshot artifacts not in Central :
https://build.shibboleth.net/maven/thirdparty-snapshots

Maven User Settings File (~/.m2/settings.xml)

Here is an example Maven user settings file (~/.m2/settings.xml) :

<?xml version="1.0" encoding="UTF-8"?> <settings xmlns="http://maven.apache.org/SETTINGS/1.2.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.2.0 https://maven.apache.org/xsd/settings-1.2.0.xsd"> <activeProfiles> <activeProfile>shibboleth-repositories</activeProfile> </activeProfiles> <profiles> <profile> <id>shibboleth-repositories</id> <repositories> <repository> <id>shibboleth-releases</id> <name>Shibboleth Releases Repository</name> <url>https://build.shibboleth.net/maven/releases/</url> <releases> <enabled>true</enabled> <checksumPolicy>warn</checksumPolicy> </releases> <snapshots> <enabled>false</enabled> </snapshots> </repository> <repository> <id>shibboleth-snapshots</id> <name>Shibboleth Snapshots Repository</name> <url>https://build.shibboleth.net/maven/snapshots/</url> <releases> <enabled>false</enabled> </releases> <snapshots> <enabled>true</enabled> <checksumPolicy>fail</checksumPolicy> </snapshots> </repository> <repository> <id>shibboleth-thirdparty</id> <name>Shibboleth Thirdparty Repository</name> <url>https://build.shibboleth.net/maven/thirdparty/</url> <releases> <enabled>true</enabled> <checksumPolicy>fail</checksumPolicy> </releases> <snapshots> <enabled>false</enabled> </snapshots> </repository> <repository> <id>shibboleth-thirdparty-snapshots</id> <name>Shibboleth Thirdparty Snapshots Repository</name> <url>https://build.shibboleth.net/maven/thirdparty-snapshots/</url> <releases> <enabled>false</enabled> </releases> <snapshots> <enabled>true</enabled> <checksumPolicy>warn</checksumPolicy> </snapshots> </repository> </repositories> <pluginRepositories> <pluginRepository> <id>shibboleth-releases</id> <name>Shibboleth Releases Repository</name> <url>https://build.shibboleth.net/maven/releases/</url> <releases> <enabled>true</enabled> <checksumPolicy>fail</checksumPolicy> </releases> <snapshots> <enabled>false</enabled> </snapshots> </pluginRepository> <pluginRepository> <id>shibboleth-snapshots</id> <name>Shibboleth Snapshots Repository</name> <url>https://build.shibboleth.net/maven/snapshots/</url> <releases> <enabled>false</enabled> </releases> <snapshots> <enabled>true</enabled> <checksumPolicy>fail</checksumPolicy> </snapshots> </pluginRepository> </pluginRepositories> </profile> </profiles> <!-- This HTTPS mirror of Central may be required when building projects based on the V7 parent project. For example, net.shibboleth.utilities.jetty9:jetty94-dta-ssl:1.0.0 which depends on net.shibboleth:parent:7.11.0 This is because the V7 parent project defines the Central repository URL using HTTP instead of HTTPS. See https://maven.apache.org/docs/3.8.1/release-notes.html#how-to-fix-when-i-get-a-http-repository-blocked --> <!-- <mirrors> <mirror> <id>central-https</id> <name>HTTPS mirror of HTTP Central</name> <url>https://repo.maven.apache.org/maven2</url> <mirrorOf>central</mirrorOf> </mirror> </mirrors> --> </settings>

Shibboleth Thirdparty Maven Repository

The Shibboleth thirdparty Maven repository contains thirdparty artifacts that are not available from the Maven Central Repository.

As of 24 January 2022, the thirdparty repository only contains com/duosecurity. Previously it hosted the entire supply-chain for Shibboleth Java projects.

Old Shibboleth Maven Repository URLs

As of 20 January 2022, the following Maven repository URLs are being redirected :
https://build.shibboleth.net/nexus/content/groups/public
to
https://build.shibboleth.net/maven/releases

https://build.shibboleth.net/nexus/content/repositories/releases
to
https://build.shibboleth.net/maven/releases

https://build.shibboleth.net/nexus/content/repositories/snapshots
to
https://build.shibboleth.net/maven/snapshots

https://build.shibboleth.net/nexus/content/repositories/thirdparty-snapshots
to
https://build.shibboleth.net/maven/thirdparty-snapshots