pom.xml

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
  <modelVersion>4.0.0</modelVersion>

  <groupId>fi.refineid</groupId>
  <artifactId>refineid-signer</artifactId>
  <!-- YY.M.D, the release date, no zero padding. -->
  <version>26.8.9.151</version>
  <packaging>jar</packaging>

  <name>ReFineID Signer</name>
  <description>
    Document signing with Finnish identity cards. Contains no
    smartcard-protocol code: the card is reached through the Java
    Cryptography Architecture, and the platform card stack does the
    talking. See doc/adr/0002 for why.
  </description>

  <properties>
    <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    <maven.compiler.release>21</maven.compiler.release>
    <!-- Held here rather than inline so an upgrade is one edit and the
         version a build used is visible in one place. -->
    <dss.version>6.1</dss.version>
    <junit.version>5.11.3</junit.version>
    <javafx.version>21.0.5</javafx.version>
    <!-- The card module the app loads. Override to run against a build
         under test: mvn javafx:run -Drefineid.module=/path/to/module -->
    <refineid.module>/usr/local/lib/librefineid_pkcs11_sign.dylib</refineid.module>
  </properties>

  <dependencies>
    <!-- Signature formats, validation, and trusted-list handling.
         ADR-0003: this is the whole reason the application is on the
         JVM rather than written against a card directly. -->
    <dependency>
      <groupId>eu.europa.ec.joinup.sd-dss</groupId>
      <artifactId>dss-pades-pdfbox</artifactId>
      <version>${dss.version}</version>
    </dependency>
    <dependency>
      <groupId>eu.europa.ec.joinup.sd-dss</groupId>
      <artifactId>dss-asic-xades</artifactId>
      <version>${dss.version}</version>
    </dependency>
    <!-- The token this application actually signs with: a JCA
         KeyStore backed by the platform card stack. -->
    <dependency>
      <groupId>eu.europa.ec.joinup.sd-dss</groupId>
      <artifactId>dss-token</artifactId>
      <version>${dss.version}</version>
    </dependency>

    <!-- Fetching a timestamp from an authority, and the network
         clients DSS uses to do it. -->
    <dependency>
      <groupId>eu.europa.ec.joinup.sd-dss</groupId>
      <artifactId>dss-service</artifactId>
      <version>${dss.version}</version>
    </dependency>

    <!-- Reading a signature back, which is how a signed document is
         checked rather than assumed. -->
    <dependency>
      <groupId>eu.europa.ec.joinup.sd-dss</groupId>
      <artifactId>dss-validation</artifactId>
      <version>${dss.version}</version>
    </dependency>

    <!-- DSS picks its utility implementation at runtime and refuses to
         start without one. -->
    <dependency>
      <groupId>eu.europa.ec.joinup.sd-dss</groupId>
      <artifactId>dss-utils-apache-commons</artifactId>
      <version>${dss.version}</version>
    </dependency>

    <!-- The desktop toolkit (ADR-0006), with the natives for every
         platform this runs on. One jar that runs anywhere cannot carry
         one platform's libraries. -->
    <dependency>
      <groupId>org.openjfx</groupId>
      <artifactId>javafx-controls</artifactId>
      <version>${javafx.version}</version>
    </dependency>
    <dependency>
      <groupId>org.openjfx</groupId>
      <artifactId>javafx-graphics</artifactId>
      <version>${javafx.version}</version>
      <classifier>mac-aarch64</classifier>
    </dependency>
    <dependency>
      <groupId>org.openjfx</groupId>
      <artifactId>javafx-graphics</artifactId>
      <version>${javafx.version}</version>
      <classifier>mac</classifier>
    </dependency>
    <dependency>
      <groupId>org.openjfx</groupId>
      <artifactId>javafx-graphics</artifactId>
      <version>${javafx.version}</version>
      <classifier>linux</classifier>
    </dependency>
    <dependency>
      <groupId>org.openjfx</groupId>
      <artifactId>javafx-graphics</artifactId>
      <version>${javafx.version}</version>
      <classifier>win</classifier>
    </dependency>
    <dependency>
      <groupId>org.openjfx</groupId>
      <artifactId>javafx-controls</artifactId>
      <version>${javafx.version}</version>
      <classifier>mac-aarch64</classifier>
    </dependency>
    <dependency>
      <groupId>org.openjfx</groupId>
      <artifactId>javafx-controls</artifactId>
      <version>${javafx.version}</version>
      <classifier>mac</classifier>
    </dependency>
    <dependency>
      <groupId>org.openjfx</groupId>
      <artifactId>javafx-controls</artifactId>
      <version>${javafx.version}</version>
      <classifier>linux</classifier>
    </dependency>
    <dependency>
      <groupId>org.openjfx</groupId>
      <artifactId>javafx-controls</artifactId>
      <version>${javafx.version}</version>
      <classifier>win</classifier>
    </dependency>

    <dependency>
      <groupId>org.junit.jupiter</groupId>
      <artifactId>junit-jupiter</artifactId>
      <version>${junit.version}</version>
      <scope>test</scope>
    </dependency>
  </dependencies>

  <build>
    <plugins>
      <plugin>
        <!-- Puts the version in the jar manifest, which is where the
             running application reads it from. -->
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-jar-plugin</artifactId>
        <version>3.4.2</version>
        <configuration>
          <archive>
            <manifest>
              <addDefaultImplementationEntries>true</addDefaultImplementationEntries>
            </manifest>
          </archive>
        </configuration>
      </plugin>
      <plugin>
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-surefire-plugin</artifactId>
        <version>3.5.2</version>
      </plugin>
      <plugin>
        <!-- One runnable jar for every operating system: the
             application, its libraries, and the JavaFX natives for
             each platform. A machine with a JDK needs nothing else. -->
        <groupId>org.apache.maven.plugins</groupId>
        <artifactId>maven-shade-plugin</artifactId>
        <version>3.6.0</version>
        <executions>
          <execution>
            <phase>package</phase>
            <goals>
              <goal>shade</goal>
            </goals>
            <configuration>
              <shadedArtifactAttached>true</shadedArtifactAttached>
              <shadedClassifierName>all</shadedClassifierName>
              <createDependencyReducedPom>false</createDependencyReducedPom>
              <transformers>
                <transformer
                  implementation="org.apache.maven.plugins.shade.resource.ManifestResourceTransformer">
                  <mainClass>fi.refineid.signer.ui.Launcher</mainClass>
                  <manifestEntries>
                    <Implementation-Version>${project.version}</Implementation-Version>
                    <!-- Kept, because shading drops it and the library
                         that reaches the card is a multi-release jar:
                         without this the JVM loads its Java 8 code,
                         which cannot open a PKCS#11 provider at all
                         and says so as "JDK < 9". Measured: the jar
                         built without this could not sign. -->
                    <Multi-Release>true</Multi-Release>
                  </manifestEntries>
                </transformer>
                <transformer
                  implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"/>
              </transformers>
              <filters>
                <filter>
                  <artifact>*:*</artifact>
                  <excludes>
                    <exclude>META-INF/*.SF</exclude>
                    <exclude>META-INF/*.DSA</exclude>
                    <exclude>META-INF/*.RSA</exclude>
                    <exclude>module-info.class</exclude>
                  </excludes>
                </filter>
              </filters>
            </configuration>
          </execution>
        </executions>
      </plugin>
      <plugin>
        <groupId>org.openjfx</groupId>
        <artifactId>javafx-maven-plugin</artifactId>
        <version>0.0.8</version>
        <configuration>
          <mainClass>fi.refineid.signer.ui.SignerApp</mainClass>
          <options>
            <option>-Drefineid.module=${refineid.module}</option>
            <!-- Without this macOS names the application after the
                 process and the main class, so its menu reads "java"
                 and "fi.refineid.signer.ui.SignerApp". One word: the
                 plugin splits an option on spaces, and the tail of a
                 two-word name arrives as the class to run. The
                 packaged build takes its full name from the bundle. -->
            <option>-Xdock:name=ReFineID</option>
          </options>
        </configuration>
      </plugin>
    </plugins>
  </build>
</project>