jenkinsci/dependency-track-plugin

HTTP 403 Forbidden, but curl works fine

nikolajbrinch opened this issue · 1 comments

nikolajbrinch commented

Describe the bug

When setting up the plugin configuration, the plugin is unable to authenticate/authorize, and a HTTP 403 Forbidden is returned, If I try to do the same directly using curl, it works just fine.

Environment

  • Plugin Version: 4.3.1
  • Jenkins Version: 2.434
  • Java Version for Jenkins: JDK 17
  • Type of Jenkins Job: scripted pipeline
  • Dependency-Track Version: 4.9.1

To Reproduce

Steps to reproduce the behavior:

  1. Setup the plugin

  2. Click on Test Connection

  3. Run pipeline configured to call dependencyTrackPublisher

Expected behavior

That the SBOM (build/reports/bom.xml) for the Gradle project is published

Additional context

Attached is a screnshot of the plugin configuration

Screenshot 2023-12-01 at 10 50 14

Jenkins is running in Kubernetes, and so is dependency track. I can see the project fine in Dependency Track on https://dtrack-[xxxxx].dk after manually using curl (POST) to publish on https://[xxxxx].dk/dependency-track.
I have tried with Kubernetes credentials provider and the built in Jenkins credentials, same result.

nbj-nine commented

Reason is NGINX and not related to DependencyTrack. Closing