Skip to content

Commit b0bfec7

Browse files
committed
Update credential validator for Sonatype Central Portal
- Switch from deprecated oss.sonatype.org to Central Portal - Use CENTRAL_USERNAME/CENTRAL_PASSWORD secrets - Use UserToken auth scheme (base64 encoded) against Central Portal API
1 parent 5c1c117 commit b0bfec7

1 file changed

Lines changed: 18 additions & 18 deletions

File tree

.github/workflows/credential-validation.yml

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -31,35 +31,35 @@ jobs:
3131
exit 1
3232
fi
3333
34-
- name: Validate Maven Central (OSSRH) Credentials
34+
- name: Validate Maven Central (Central Portal) Credentials
3535
id: validate_maven_central
36-
if: always() # Run even if JFrog validation fails
36+
if: always()
3737
run: |
38-
echo "Testing Maven Central (OSSRH) connection..."
39-
40-
# Test authentication against Nexus staging profiles API
38+
echo "Testing Maven Central (Central Portal) connection..."
39+
40+
# Central Portal uses UserToken auth scheme: Authorization: UserToken <base64(user:pass)>
41+
TOKEN=$(echo -n "${{ secrets.CENTRAL_USERNAME }}:${{ secrets.CENTRAL_PASSWORD }}" | base64)
4142
HTTP_CODE=$(curl -s -o /dev/null -w '%{http_code}' \
42-
-u "${{ secrets.OSSRH_USERNAME }}:${{ secrets.OSSRH_PASSWORD }}" \
43-
"https://oss.sonatype.org/service/local/staging/profiles")
44-
43+
-H "Authorization: UserToken $TOKEN" \
44+
"https://central.sonatype.com/api/v1/publisher/published?namespace=org.jfrog.buildinfo&name=artifactory-maven-plugin&version=3.7.1")
45+
4546
echo "Maven Central API response: $HTTP_CODE"
46-
47-
if [ "$HTTP_CODE" = "200" ]; then
47+
48+
# 200 = auth OK and artifact found
49+
# 404 = auth OK but artifact not found
50+
# 401 = invalid credentials
51+
if [ "$HTTP_CODE" = "200" ] || [ "$HTTP_CODE" = "404" ]; then
4852
echo "status=SUCCESS" >> $GITHUB_OUTPUT
49-
echo "message=Maven Central connection successful" >> $GITHUB_OUTPUT
50-
echo "SUCCESS: Maven Central credentials are valid"
53+
echo "message=Maven Central credentials valid" >> $GITHUB_OUTPUT
54+
echo " Maven Central credentials are valid"
5155
elif [ "$HTTP_CODE" = "401" ]; then
5256
echo "status=FAILURE" >> $GITHUB_OUTPUT
5357
echo "message=Authentication failed - invalid credentials" >> $GITHUB_OUTPUT
54-
echo "ERROR: Maven Central authentication failed (401)"
58+
echo " Maven Central authentication failed (401)"
5559
exit 1
56-
elif [ "$HTTP_CODE" = "403" ]; then
57-
echo "status=SUCCESS" >> $GITHUB_OUTPUT
58-
echo "message=Credentials valid (limited permissions on staging API is normal)" >> $GITHUB_OUTPUT
59-
echo "SUCCESS: Maven Central credentials valid (403 on staging API is acceptable for deployment)"
6060
else
6161
echo "status=FAILURE" >> $GITHUB_OUTPUT
6262
echo "message=Connection failed - HTTP $HTTP_CODE" >> $GITHUB_OUTPUT
63-
echo "ERROR: Maven Central connection failed with HTTP $HTTP_CODE"
63+
echo " Maven Central connection failed with HTTP $HTTP_CODE"
6464
exit 1
6565
fi

0 commit comments

Comments
 (0)