Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-12022

Allow preemptive authentication for maven proxy repositories

    XMLWordPrintable

Details

    • 4

    Description

      Background
      Preemptive auth in general is bad (this is why clients like Maven does not do them by default). Still, there are valid user cases when it would be perfectly acceptable to have proxy repository outbound requests which are known to require authentication to use pre-emptive auth.

      • the remote is a known internal endpoint that is implicitly trusted
      • the remote is known to ALWAYS require auth, instead of for just some URLs
      • the connection is over a https connection
      • bandwidth needs to be conserved, this type of auth only sends one request with credentials instead of sending two,
      • Load (network, disk, CPU) can be reduced
      • outbound request logging is reduced ( 1 instead of 2)
      • latency to resolve the incoming request is reduced

      Acceptance

      • Admins have a way of enabling pre-emptive authentication for maven proxy repositories
      • Pre-emptive auth requires an HTTPS remote URL; this is enforced by validation for both UI and REST repo definition/configuration

      Attachments

        Issue Links

          is depended on by

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. NEXUS-12456 add support for "npm login" bearer token authentication to proxied upstream NPM private repositories

          • Major - Major loss of function.
          • Done
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-9025 Proxy NPM Repository does not send authentication upstream

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. NEXUS-9360 Use preemptive authentication while communicate with authenticated proxy

          • Major - Major loss of function.
          • Closed
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. NEXUS-8306 Pre-emptive authentication for remote proxy HTTP requests

          • Major - Major loss of function.
          • Closed
          relates

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-35916 Allow preemptive authentication for helm proxy repositories

          • Major - Major loss of function.
          • New

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-11300 Unable to connect to private repository on dockerhub

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-25935 docker proxy repos do not work with pro and enterprise bintray docker registries using access keys

          • Major - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. NEXUS-26118 pip search does not work *via* NXRM PyPI proxy to NXRM PyPI repository and authentication is required

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. NEXUS-14231 add option for preemptively sending auth to an HTTP proxy server

          • Major - Major loss of function.
          • New

          Improvement - An improvement or enhancement to an existing feature or task. NEXUS-22134 add support to Maven proxy repository for gitlab private maven repository http header token authentication

          • Major - Major loss of function.
          • New
          mentioned in

          Page Loading...

          Activity

            People

              dsawa Dawid Sawa
              plynch Peter Lynch
              Srinivasan Appusamy Srinivasan Appusamy
              NXRM - Groot
              Votes:
              9 Vote for this issue
              Watchers:
              26 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                tigCommentSecurity.panel-title