feat: add plain-HTTP listeners for various repository configurations to support non-HTTPS access

Signed-off-by: d9pouces <github@19pouces.net>

tests/dockerfiles/Java.Dockerfile

@@ -4,6 +4,7 @@ COPY --from=target / /src/
 COPY --from=generated-config Java.yaml /config.yaml
 RUN id-configurator apply --config /config.yaml --src /src --dst /dst
 FROM target AS runtime
+ARG JAVA_REPO_SCHEME
 # Every build tool the `java` module configures: Maven itself (already part
 # of this image), Gradle, Ivy and Leiningen (all packaged for this Ubuntu
 # base), and SBT (no package available, fetched as a plain release tarball).
@@ -43,12 +44,23 @@ RUN java -jar /usr/share/java/ivy.jar -settings /root/.ivy2/ivysettings.xml \
        -retrieve "/tmp/ivyretrieve/[artifact]-[revision].[ext]" \
     && test -f /tmp/ivyretrieve/idconfiguratortestpkg-0.0.1.jar
 
+# Leiningen's standalone launcher unconditionally refuses any plain-HTTP
+# repository ("Tried to use insecure HTTP repository without TLS") before
+# even reading project.clj/profiles.clj - there is no `:insecure` key or
+# other configuration escape hatch for this (confirmed from Leiningen's own
+# source: leiningen.core.main/-main registers an aborting wagon for the
+# "http" scheme unconditionally). So this check is skipped for the
+# module-java-http variant: no id-configurator config could make it pass.
 RUN mkdir -p /tmp/leintest && cd /tmp/leintest \
     && cat > project.clj <<'EOF'
 (defproject leintest "0.1.0"
   :dependencies [[org.interdiode/idconfiguratortestpkg "0.0.1"]])
 EOF
-RUN cd /tmp/leintest && lein deps :tree | grep -q idconfiguratortestpkg
+RUN if [ "$JAVA_REPO_SCHEME" = "https" ]; then \
+        cd /tmp/leintest && lein deps :tree | grep -q idconfiguratortestpkg; \
+    else \
+        echo "skipping leiningen: it cannot use a non-HTTPS repository"; \
+    fi
 
 RUN mkdir -p /tmp/sbttest/project \
     && cat > /tmp/sbttest/build.sbt <<'EOF'

tests/test_java.py

@@ -339,21 +339,7 @@ def test_apply_writes_sbt_repositories(tmp_path) -> None:
     )
 
 
-def test_apply_writes_lein_profiles(tmp_path) -> None:
-    dst = tmp_path / "dst"
-    context = Context(config=make_config(TWO_REPOS_CONFIG), dst=dst, src=None)
-
-    JavaModule().apply(context)
-
-    profiles = (dst / "root/.lein/profiles.clj").read_text(encoding="utf-8")
-    assert profiles == (
-        "{:user {:repositories "
-        '[["interdiode" {:url "https://example.invalid/maven"}] '
-        '["interdiode-extra" {:url "https://example2.invalid/maven"}]]}}\n'
-    )
-
-
-def test_apply_marks_non_https_lein_repository_as_insecure(tmp_path) -> None:
+def test_apply_marks_non_https_sbt_repository_as_insecure(tmp_path) -> None:
     data = {
         "uuid": "12345678-1234-5678-1234-567812345678",
         "organisation": "InterDiode",
@@ -370,10 +356,25 @@ def test_apply_marks_non_https_lein_repository_as_insecure(tmp_path) -> None:
 
     JavaModule().apply(context)
 
+    repositories = (dst / "root/.sbt/repositories").read_text(encoding="utf-8")
+    assert repositories == (
+        "[repositories]\n"
+        "  local\n"
+        "  interdiode: http://example.invalid/maven, allowInsecureProtocol\n"
+    )
+
+
+def test_apply_writes_lein_profiles(tmp_path) -> None:
+    dst = tmp_path / "dst"
+    context = Context(config=make_config(TWO_REPOS_CONFIG), dst=dst, src=None)
+
+    JavaModule().apply(context)
+
     profiles = (dst / "root/.lein/profiles.clj").read_text(encoding="utf-8")
     assert profiles == (
         "{:user {:repositories "
-        '[["interdiode" {:url "http://example.invalid/maven" :insecure true}]]}}\n'
+        '[["interdiode" {:url "https://example.invalid/maven"}] '
+        '["interdiode-extra" {:url "https://example2.invalid/maven"}]]}}\n'
     )