[ http://jira.codehaus.org/browse/WAGON-291?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Brian Fox moved MNG-4435 to WAGON-291: -------------------------------------- Complexity: (was: Intermediate) Component/s: (was: Deployment) wagon-http Affects Version/s: (was: 2.2.1) 1.0-beta-6 Key: WAGON-291 (was: MNG-4435) Project: Maven Wagon (was: Maven 2) > Maven uses artifact download credentials during deployment in some > circumstances > -------------------------------------------------------------------------------- > > Key: WAGON-291 > URL: http://jira.codehaus.org/browse/WAGON-291 > Project: Maven Wagon > Issue Type: Bug > Components: wagon-http > Affects Versions: 1.0-beta-6 > Reporter: Rich Seddon > > If Maven downloads an artifact using authorization, this authorization seems > to be cached, which can cause a subsequent deployment to succeed where it > should have failed. > Steps to reproduce: > # Set up a build which will require downloading an artifact from a Nexus > server which requires authentication, and configure your settings.xml > appropriately. > # Create a project with a distribution management section which points to a > repository in the above server. Make sure the repository id doesn't exist in > your settings.xml > # Run "mvn deploy" > What happens: > If the credentials used to download artifacts from Nexus have deployment > privileges in the Nexus repository the deployment will succeed. > Now run "mvn deploy" again. This time the deployment will fail with a 401 > code. > This bug exists in both Maven 2.2.1 and the latest Maven 3.0 snapshots. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira