66 lines
2.9 KiB
Markdown
66 lines
2.9 KiB
Markdown
---
|
||
title: Publishing Credentials Sample
|
||
source: https://docs.gradle.org/current/samples/sample_publishing_credentials.html
|
||
tags:
|
||
- IT/Development/Gradle
|
||
- IT/Development/Maven
|
||
- IT/Development/Java
|
||
- IT/Development/Groovy
|
||
- IT/Development/Kotlin
|
||
---
|
||
|
||
- [Groovy DSL](https://docs.gradle.org/current/samples/zips/sample_publishing_credentials-groovy-dsl.zip)
|
||
- [Kotlin DSL](https://docs.gradle.org/current/samples/zips/sample_publishing_credentials-kotlin-dsl.zip)
|
||
|
||
This sample shows how credentials can be used when publishing artifacts to a Maven repository using [project properties](https://docs.gradle.org/current/userguide/build_environment.html#sec:project_properties). This approach allows you to keep sensitive configuration out of your project’s source code and inject it only when needed.
|
||
|
||
The code in the `maven-repository-stub` directory builds a plugin used to stub the Maven repository in order to demonstrate the authentication flow. It expects the following hardcoded credentials on the server stub:
|
||
|
||
In a real project, your build would point to a private repository for your organization.
|
||
|
||
The published project has some sample Java code to be compiled and distributed as a Java library. Gradle build file registers a publication to a Maven repository using provided credentials:
|
||
|
||
build.gradle
|
||
```groovy
|
||
publishing {
|
||
publications {
|
||
library(MavenPublication) {
|
||
from components.java
|
||
}
|
||
}
|
||
repositories {
|
||
maven {
|
||
name = 'mySecureRepository'
|
||
credentials(PasswordCredentials)
|
||
// url = uri(<<some repository url>>)
|
||
}
|
||
}
|
||
}
|
||
```
|
||
|
||
Credentials will be required by the build only if the task requiring them is to be executed - in this case the task publishing to the secure repository. This allows to build the project without worrying about the credentials. Try running `./gradlew jar` and it will succeed. Run `./gradlew publish` and it will tell you what is missing right away, without executing the build. Credentials can and should be kept externally from the project sources and be known only by those having to publish artifacts, perhaps injected by a CI server.
|
||
|
||
Credential values are provided using Gradle properties and can be passed to the publish task in multiple ways:
|
||
|
||
- via command-line properties:
|
||
|
||
```shell
|
||
$ ./gradlew publish -PmySecureRepositoryUsername=secret-user -PmySecureRepositoryPassword=secret-password
|
||
```
|
||
|
||
- via environment variables:
|
||
|
||
```shell
|
||
$ ORG\_GRADLE\_PROJECT\_mySecureRepositoryUsername=secret-user ORG\_GRADLE\_PROJECT\_mySecureRepositoryPassword=secret-password ./gradlew publish
|
||
```
|
||
|
||
- by setting the properties in `gradle.properties` file:
|
||
|
||
```properties
|
||
mySecureRepositoryUsername=secret-user
|
||
mySecureRepositoryPassword=secret-password
|
||
```
|
||
|
||
and running
|
||
|
||
The sensitive data is kept outside of the project sources since the `gradle.properties` file can reside in the user’s `~/.gradle` directory. |