Implement strict checksum validation option for Repository

[sbespalov]

Task Description

We need to have an strictChecksum option for Repository which will prevent of uploading artifacts with broken checksum. For now we have only ERROR log message in case of invalid checksum (see ArtifactManagementService.validateUploadedChecksumAgainstCache).

This should be configurable.

Tasks

The following tasks will need to be carried out:

• Add strictChecksum property of type boolean for org.carlspring.strongbox.storage.repository.Repository interface
• Support strictChecksum option for repositories items in strongbox.yaml
• Throw ArtifactStorageException in case of matchesChecksum returns false and Repository.isStrictChecksum() == true within ArtifactManagementService#validateUploadedChecksumAgainstCache
• Provide Unit Tests covering new feature
• Update the strongbox-yaml documentation in strongbox-docs

Useful Links

• strongbox.yaml
• Writing tests

Help

• Our chat
• Points of contact:
  • @carlspring
  • @fuss86
  • @sbespalov
  • @steve-todorov

[tomasdaneshjo]

Hey, could I start working on this as my first issue?

[carlspring]

Hi!

Feel free to dig in! :)

[newarcher36]

Hi
@tomasdaneshjo are you still working on it?

[newarcher36]

Since It looks like nobody is working on this issue anymore, I am gonna start working on it.

[carlspring]

Dig into it and have fun, @newarcher36 ! :)

[newarcher36]

Hi @sbespalov Just a quick question, which value do I set by default in the property strictChecksum in strongbox.yaml? Thanks

[sbespalov]

@newarcher36 let it be true by default