Package org.eclipse.aether.transport.apache

Class ApacheTransporterConfigurationKeys

    • Field Detail

      • CONFIG_PROP_USE_SYSTEM_PROPERTIES

        public static final java.lang.String CONFIG_PROP_USE_SYSTEM_PROPERTIES
        If enabled, underlying Apache HttpClient will use system properties as well to configure itself (typically used to set up HTTP Proxy via Java system properties). See HttpClientBuilder for used properties. This mode is not recommended, better use documented ways of configuration instead. Proxy authentication may use http.proxyUser/http.proxyPassword or https.proxyUser/https.proxyPassword when the corresponding proxy host and port match. Explicit Resolver credentials take precedence; system proxy credentials are never used for repository authentication.
        See Also:
        Constant Field Values

      • CONFIG_PROP_HTTP_RETRY_HANDLER_NAME

        public static final java.lang.String CONFIG_PROP_HTTP_RETRY_HANDLER_NAME
        The name of retryHandler, supported values are “standard”, that obeys RFC-2616, regarding idempotent methods, and “default” that considers requests w/o payload as idempotent.
        See Also:
        Constant Field Values

      • CONFIG_PROP_FOLLOW_REDIRECTS

        @Deprecated
public static final java.lang.String CONFIG_PROP_FOLLOW_REDIRECTS
        Deprecated.
        Use ConfigurationProperties.HTTP_REDIRECT_MODE instead.
        If enabled, Apache HttpClient will follow HTTP redirects.
        Since:
        2.0.2
        See Also:
        Constant Field Values

      • CONFIG_PROP_ORIGIN_SCOPED_HEADERS

        @Deprecated
public static final java.lang.String CONFIG_PROP_ORIGIN_SCOPED_HEADERS
        Deprecated.
        Use ConfigurationProperties.HTTP_ORIGIN_SCOPED_HEADERS instead.
        If enabled (default), operator-configured request headers (aether.transport.http.headers) are only sent on requests targeting the repository origin (the scheme, host and port the repository URL denotes). Apache HttpClient re-sends the original request headers on redirects, so without origin scoping a cross-origin redirect replays the configured headers - which frequently carry credentials such as Authorization, cookies or private token headers - to the redirect target host. Disable only when a redirect target legitimately requires the configured headers.
        Since:
        2.0.23
        See Also:
        Constant Field Values

      • CONFIG_PROP_FOLLOW_INSECURE_REDIRECTS

        @Deprecated
public static final java.lang.String CONFIG_PROP_FOLLOW_INSECURE_REDIRECTS
        Deprecated.
        Use ConfigurationProperties.HTTP_FOLLOW_INSECURE_REDIRECT instead.
        If enabled, Apache HttpClient will follow redirects that downgrade the protocol from https to http. Disabled by default: such a downgrade strips transport encryption from artifact and checksum bytes and makes repository credentials eligible for transmission over plaintext, so a downgrading redirect fails the transfer instead.
        Since:
        2.0.23
        See Also:
        Constant Field Values