As always thanks for your answer!
I integrated https://github.com/cyberark/conjur-api-java in https://github.com/conjurdemos/pet-store-demo in a project and it worked (after some changes explained et the end of this post) with the exact same CONJUR_X parameters.
There is so obviously something wrong with Clojure.
I spent some cycles trying different options and trying to make sure it was not a code issue (I did not know Clojure before).
Here are my findings:
- With the equivalent of Conjur() constructor:
NPE error at login NPE_login.txt (1.7 KB)
- With the equivalent of Conjur(username password) constructor:
NPE error at login (same as before)
- With the equivalent of Conjur(username password authnurl) constructor: NPE error at retrieveSecret
NPE_retrieveSecret.txt (1.3 KB)
So the Null Pointer Exception arrises when
getMandatoryProperties is called here for login.
Then if the above passes, there seem to be an issue with the ResourceClient
I am not experienced enough in Clojure dev to understand what is going wrong.
I guess it might come from the interoperability with Java that is maybe limited or from a missing dependency or just the implementation of the API client that is not compatible with Clojure.
As per the API client:
I really think there is an issue with what’s included in it.
I had to rework the dependencies both in the Clojure project and in the Java project
project.clj.txt pom.xml.txt so that I could build projects.
The issue was conflicting slf4j for Clojure and logback for Java (Springframework).
I think dependencies are introduced by this commit and as stated by slf4j doc, it should not have been done so.
I also had to had a javax activation dependency to make it work with the pet-store-demo so I am not sure it can easily be used as is.
What would be the best way to report this? Any suggestions?
(I kept the logs if needed)
To sum up:
I am stucked on Clojure so I’ll wait until someone has an idea or if a Clojure expert can help me debug this.
I’d like to know what do you think about the issues I ran into with the conjur-api-java and know if I should report them.
Thanks for reading!