Open davetobin opened 1 year ago
Do you have a sample npm project that causes this error that you can share?
@jeremylong I don't, unfortunately, but it looks like the issue has been resolved now. Thanks!
Dependency check and api calls that were failing yesterday are working now as expected, returning 200.
curl -X 'POST' \
'https://ossindex.sonatype.org/api/v3/authorized/component-report' \
-H 'accept: application/vnd.ossindex.component-report.v1+json' \
-H 'authorization: Basic $TOKEN' \
-H 'Content-Type: application/vnd.ossindex.component-report-request.v1+json' \
-d '{
"coordinates": [
"pkg:npm/%40babel%2Fplugin-transform-unicode-regex@7.18.6"
]
}
'
now returns
200
[
{
"coordinates": "pkg:npm/%40babel%2Fplugin-transform-unicode-regex@7.18.6",
"reference": "https://ossindex.sonatype.org/component/pkg:npm/%40babel%2Fplugin-transform-unicode-regex@7.18.6?utm_source=mozilla&utm_medium=integration&utm_content=5.0",
"vulnerabilities": []
}
]
Apologies if this is the wrong place for this.
Using Dependency Check maven plugin 6.5.3, it looks like it URL encodes
/
as%2F
. e.g.pkg:npm/%40babel%2Fplugin-transform-unicode-regex@7.18.6
.POST requests to
https://ossindex.sonatype.org/api/v3/component-report
are returning a 500 when%2F
is included.Dependency Check logs:
Making the same request from https://ossindex.sonatype.org/rest returns 500 also.
If
%2F
's are replaced with/
's then the request is successful.To reproduce:
returns:
returns: