<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">

    <modelVersion>4.0.0</modelVersion>

    <groupId>com.mulesoft.modules</groupId>
    <artifactId>mule-wss-module</artifactId>
    <version>2.0.0</version>
    <packaging>mule-extension</packaging>

    <name>Web Service Security Module</name>
    <description>A Mule extension that provides functionality for applying security to Web Services</description>

    <parent>
        <groupId>org.mule.extensions</groupId>
        <artifactId>mule-ee-core-modules-parent</artifactId>
        <version>1.9.0</version>
    </parent>

    <properties>
        <licenseYear>2025</licenseYear>
        <wss4j.version>2.4.1</wss4j.version>
        <spring.version>6.4.6</spring.version>
        <jaxws-rt.version>2.3.6</jaxws-rt.version>

        <formatterConfigPath>formatter.xml</formatterConfigPath>

        <!-- Remove when a new parent version with MTF is available -->
        <munit.input.directory>src/test/munit</munit.input.directory>
        <munit.output.directory>${basedir}/target/test-mule/munit</munit.output.directory>
        <munit.extensions.maven.plugin.version>1.6.0-rc1</munit.extensions.maven.plugin.version>
        <munit.version>3.5.0-rc1</munit.version>

        <docker.maven.plugin.version>0.43.0</docker.maven.plugin.version>
        <docker.skip>${skipTests}</docker.skip>
        <powermock.version>2.0.9</powermock.version>
        <maven.surefire.plugin.version>3.1.2</maven.surefire.plugin.version>
        <maven.compiler.plugin.version>3.11.0</maven.compiler.plugin.version>
        <jacoco.version>0.8.10</jacoco.version>

        <mockito-core.version>4.11.0</mockito-core.version>
        <sdk-api.version>0.7.5</sdk-api.version>
        <jakarta-ws-api.version>4.0.2</jakarta-ws-api.version>
        <metro.version>4.0.4</metro.version>

        <validate.saml.empty.truststore.config.ref>${validate.saml.empty.truststore.config}</validate.saml.empty.truststore.config.ref>
        <validate.saml.truststore.config.ref>${validate.saml.truststore.config}</validate.saml.truststore.config.ref>
        <validate.saml.truststore.non.matching.config.ref>${validate.saml.truststore.non.matching.config}</validate.saml.truststore.non.matching.config.ref>
        <request.without.security.config.ref>${request.without.security.config}</request.without.security.config.ref>
        <validate.signature.config.ref>${validate.signature.config}</validate.signature.config.ref>
        <valid.certificate.constraint.config.ref>${valid.certificate.constraint.config}</valid.certificate.constraint.config.ref>
        <invalid.certificate.constraint.config.ref>${invalid.certificate.constraint.config}</invalid.certificate.constraint.config.ref>
        <expression.certificate.constraint.config.ref>${expression.certificate.constraint.config}</expression.certificate.constraint.config.ref>
        <decryption.config.ref>${decryption.config}</decryption.config.ref>
        <decryption.username.config.ref>${decryption.username.config}</decryption.username.config.ref>
        <remove.header.config.ref>${remove.header.config}</remove.header.config.ref>
        <wss.validation.config.ref>${wss.validation.config}</wss.validation.config.ref>
        <outbound.timestamp.sign.config.ref>${outbound.timestamp.sign.config}</outbound.timestamp.sign.config.ref>
        <encryption.config.ref>${encryption.config}</encryption.config.ref>
        <encryption.config.with.key.ref>${encryption.config.with.key}</encryption.config.with.key.ref>
        <sign.config.ref>${sign.config}</sign.config.ref>
        <check.signature.with.binary.security.token.config.ref>${check.signature.with.binary.security.token.config}</check.signature.with.binary.security.token.config.ref>
        <valid.encryption.without.keystore.config.ref>${valid.encryption.without.keystore.config}</valid.encryption.without.keystore.config.ref>
    </properties>

    <dependencies>
        <dependency>
            <groupId>org.mule.sdk</groupId>
            <artifactId>mule-sdk-api</artifactId>
            <version>${sdk-api.version}</version>
        </dependency>

        <dependency>
            <groupId>org.springframework.security</groupId>
            <artifactId>spring-security-ldap</artifactId>
            <version>${spring.version}</version>

            <exclusions>
                <exclusion>
                    <!-- This artifact doesn't end up being used and has known issues until 6.0.0 (6.0.0 has Java 17 as baseline) -->
                    <groupId>org.springframework.security</groupId>
                    <artifactId>spring-security-crypto</artifactId>
                </exclusion>
            </exclusions>
        </dependency>
        <dependency>
            <groupId>org.apache.wss4j</groupId>
            <artifactId>wss4j-ws-security-dom</artifactId>
            <version>${wss4j.version}</version>

            <exclusions>
                <exclusion>
                    <!-- This artifact doesn't end up being used and includes a jar-packaged vm agent -->
                    <groupId>org.ehcache</groupId>
                    <artifactId>ehcache</artifactId>
                </exclusion>
                <!--
                    bcprov is not FIPS approved and its usage is only allowed in non FIPS env
                    As we have no usage of bcprov in this module we can exclude it for FIPS compliance
                -->
                <exclusion>
                    <groupId>org.bouncycastle</groupId>
                    <artifactId>bcprov-jdk15on</artifactId>
                </exclusion>
            </exclusions>
        </dependency>

        <!-- Update dependency to fix vulnerability       -->
        <dependency>
            <groupId>org.apache.santuario</groupId>
            <artifactId>xmlsec</artifactId>
            <version>3.0.3</version>
        </dependency>

        <dependency>
            <groupId>jakarta.xml.ws</groupId>
            <artifactId>jakarta.xml.ws-api</artifactId>
            <version>${jakarta-ws-api.version}</version>
        </dependency>
        <dependency>
            <groupId>org.glassfish.metro</groupId>
            <artifactId>webservices-rt</artifactId>
            <version>${metro.version}</version>
        </dependency>


        <dependency>
            <groupId>org.mockito</groupId>
            <artifactId>mockito-core</artifactId>
            <version>${mockito-core.version}</version>
            <scope>test</scope>
        </dependency>
    </dependencies>

    <dependencyManagement>
        <dependencies>
	    <!-- from org.mule.extensions:mule-ee-core-modules-parent -->
	    <!--     from org.mule.services:mule-service-scheduler -->
	    <!-- The dep is unused. This ghost version bump is made so analysis tools don't get angry at us -->
            <dependency>
                <groupId>com.google.guava</groupId>
                <artifactId>guava</artifactId>
                <version>32.0.1-jre</version>
            </dependency>
        </dependencies>
    </dependencyManagement>

    <distributionManagement>
        <repository>
            <id>mule-ee-releases</id>
            <name>Mule Release Repository</name>
            <url>https://repository-master.mulesoft.org/nexus/content/repositories/releases-ee</url>
        </repository>
        <snapshotRepository>
            <id>mule-ee-snapshots</id>
            <name>Mule Snapshot Repository</name>
            <url>https://repository-master.mulesoft.org/nexus/content/repositories/ci-snapshots</url>
            <uniqueVersion>false</uniqueVersion>
        </snapshotRepository>
    </distributionManagement>

    <build>
        <pluginManagement>
            <plugins>
                <plugin>
                    <groupId>com.mulesoft.munit</groupId>
                    <artifactId>munit-extensions-maven-plugin</artifactId>
                    <version>${munit.extensions.maven.plugin.version}</version>
                    <executions>
                        <execution>
                            <goals>
                                <goal>test</goal>
                            </goals>
                            <phase>integration-test</phase>
                        </execution>
                    </executions>
                    <configuration>
                        <argLines>
                            <argLine>
                                -javaagent:${settings.localRepository}/org/jacoco/org.jacoco.agent/${jacoco.version}/org.jacoco.agent-${jacoco.version}-runtime.jar=destfile=${session.executionRootDirectory}/target/jacoco.exec
                            </argLine>
                        </argLines>
                        <runtimeConfiguration>
                            <discoverRuntimes>
                                <product>EE</product>
                                <includeSnapshots>true</includeSnapshots>
                            </discoverRuntimes>
                        </runtimeConfiguration>
                        <environmentVariables>
                            <LDAP_PORT>${ldap.port}</LDAP_PORT>
                        </environmentVariables>
                    </configuration>
                    <dependencies>
                        <dependency>
                            <groupId>com.mulesoft.munit</groupId>
                            <artifactId>munit-runner</artifactId>
                            <version>${munit.version}</version>
                            <classifier>mule-plugin</classifier>
                        </dependency>
                        <dependency>
                            <groupId>com.mulesoft.munit</groupId>
                            <artifactId>munit-tools</artifactId>
                            <version>${munit.version}</version>
                            <classifier>mule-plugin</classifier>
                        </dependency>
                    </dependencies>
                </plugin>
            </plugins>
        </pluginManagement>

        <plugins>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-compiler-plugin</artifactId>
                <version>${maven.compiler.plugin.version}</version>
            </plugin>
            <plugin>
                <groupId>io.fabric8</groupId>
                <artifactId>docker-maven-plugin</artifactId>
                <version>${docker.maven.plugin.version}</version>
                <configuration>
                    <images>
                        <image>
                            <name>rroemhild/test-openldap:latest</name>
                            <build>
                                <dockerFileDir>${project.basedir}</dockerFileDir>
                            </build>
                            <run>
                                <platform>linux/amd64</platform>
                                <ports>
                                    <port>ldap.port:10389</port>
                                </ports>
                                <log>
                                    <enabled>false</enabled>
                                </log>
                                <!--Workaround for avoiding name collisions with zombie containers left from failed executions-->
                                <!--or parallel executions on same agent-->
                                <containerNamePattern>%n-%i-%t</containerNamePattern>
                            </run>
                        </image>
                    </images>
                    <verbose>true</verbose>
                </configuration>
                <executions>
                    <execution>
                        <id>start</id>
                        <phase>test-compile</phase>
                        <goals>
                            <goal>build</goal>
                            <goal>start</goal>
                        </goals>
                        <configuration>
                            <showLogs>false</showLogs>
                            <logStdout>false</logStdout>
                        </configuration>
                    </execution>
                    <!--https://github.com/fabric8io/docker-maven-plugin/issues/915, if tests fail, run docker stop <CONTAINER_ID>-->
                    <execution>
                        <id>stop</id>
                        <phase>post-integration-test</phase>
                        <goals>
                            <goal>stop</goal>
                        </goals>
                    </execution>
                </executions>
            </plugin>
            <plugin>
                <artifactId>maven-resources-plugin</artifactId>
                <executions>
                    <execution>
                        <id>copy-munit-resources</id>
                        <phase>process-test-resources</phase>
                        <goals>
                            <goal>copy-resources</goal>
                        </goals>
                        <configuration>
                            <outputDirectory>${munit.output.directory}</outputDirectory>
                            <resources>
                                <resource>
                                    <directory>${munit.input.directory}</directory>
                                    <filtering>true</filtering>
                                </resource>
                            </resources>
                        </configuration>
                    </execution>
                </executions>
            </plugin>
            <plugin>
                <groupId>org.apache.maven.plugins</groupId>
                <artifactId>maven-surefire-plugin</artifactId>
                <version>${maven.surefire.plugin.version}</version>
            </plugin>
            <plugin>
                <groupId>com.mulesoft.munit</groupId>
                <artifactId>munit-extensions-maven-plugin</artifactId>
            </plugin>
            <plugin>
                <groupId>io.qameta.allure</groupId>
                <artifactId>allure-maven</artifactId>
            </plugin>
        </plugins>
    </build>

    <profiles>
        <profile>
            <id>default-config</id>
            <activation>
                <property>
                    <name>!mule.security.model</name> <!-- if mule.security.model does not exist -->
                </property>
            </activation>
            <properties>
                <validate.saml.empty.truststore.config>validate-saml-using-empty-truststore-config</validate.saml.empty.truststore.config>
                <validate.saml.truststore.config>validate-saml-using-truststore-config</validate.saml.truststore.config>
                <validate.saml.truststore.non.matching.config>validate-saml-using-truststore-non-matching-issuer-config</validate.saml.truststore.non.matching.config>
                <request.without.security.config>request-without-security-config</request.without.security.config>
                <validate.signature.config>validate-signature-config</validate.signature.config>
                <valid.certificate.constraint.config>valid-certificate-constraint-config</valid.certificate.constraint.config>
                <invalid.certificate.constraint.config>invalid-certificate-constraint-config</invalid.certificate.constraint.config>
                <expression.certificate.constraint.config>expression-certificate-constraint-config</expression.certificate.constraint.config>
                <decryption.config>decryption-config</decryption.config>
                <decryption.username.config>decryption-username-config</decryption.username.config>
                <remove.header.config>remove-header-config</remove.header.config>
                <wss.validation.config>wss-validation-config</wss.validation.config>
                <outbound.timestamp.sign.config>outbound-timestamp-sign-config</outbound.timestamp.sign.config>
                <encryption.config>encryption-config</encryption.config>
                <encryption.config.with.key>encryption-config-with-encryption-key-identifier</encryption.config.with.key>
                <sign.config>sign-config</sign.config>
                <check.signature.with.binary.security.token.config>check-signature-with-binary-security-token-config</check.signature.with.binary.security.token.config>
                <valid.encryption.without.keystore.config>valid-encryption-without-keystore-config</valid.encryption.without.keystore.config>
            </properties>
        </profile>
        <profile>
            <id>fips-config</id>
            <activation>
                <property>
                    <name>mule.security.model</name>
                    <value>fips140-2</value> <!-- if mule.security.model == fips140-2 -->
                </property>
            </activation>
            <properties>
                <validate.saml.empty.truststore.config>validate-saml-using-empty-truststore-config-fips</validate.saml.empty.truststore.config>
                <validate.saml.truststore.config>validate-saml-using-truststore-config-fips</validate.saml.truststore.config>
                <validate.saml.truststore.non.matching.config>validate-saml-using-truststore-non-matching-issuer-config-fips</validate.saml.truststore.non.matching.config>
                <request.without.security.config>request-without-security-config-fips</request.without.security.config>
                <validate.signature.config>validate-signature-config-fips</validate.signature.config>
                <valid.certificate.constraint.config>valid-certificate-constraint-config-fips</valid.certificate.constraint.config>
                <invalid.certificate.constraint.config>invalid-certificate-constraint-config-fips</invalid.certificate.constraint.config>
                <expression.certificate.constraint.config>expression-certificate-constraint-config-fips</expression.certificate.constraint.config>
                <decryption.config>decryption-config-fips</decryption.config>
                <decryption.username.config>decryption-username-config-fips</decryption.username.config>
                <remove.header.config>remove-header-config-fips</remove.header.config>
                <wss.validation.config>wss-validation-config-fips</wss.validation.config>
                <outbound.timestamp.sign.config>outbound-timestamp-sign-config-fips</outbound.timestamp.sign.config>
                <encryption.config>encryption-config-fips</encryption.config>
                <encryption.config.with.key>encryption-config-with-encryption-key-identifier-fips</encryption.config.with.key>
                <sign.config>sign-config-fips</sign.config>
                <check.signature.with.binary.security.token.config>check-signature-with-binary-security-token-config-fips</check.signature.with.binary.security.token.config>
                <valid.encryption.without.keystore.config>valid-encryption-without-keystore-config-fips</valid.encryption.without.keystore.config>
            </properties>
        </profile>
    </profiles>
</project>
