Cardinal Commerce Broken Credentials

[desxz]

Braintree SDK Version

3.21.1

Environment

Both

Android Version & Device

No response

Braintree dependencies

com.braintreepayments.api:drop-in:5.4.2

Describe the bug

Today, we are started to getting error from cardinal mobile sdk while building our application.
We debugged the error and saw that the credentials were not working on https://cardinalcommerceprod.jfrog.io/ui/login/.
We're using credentials from https://developer.paypal.com/braintree/docs/guides/3d-secure/client-side/android/v3

maven {
            url "https://cardinalcommerceprod.jfrog.io/artifactory/android"
            credentials {
                username 'braintree_team_sdk'
                password 'AKCp8jQcoDy2hxSWhDAUQKXLDPDx6NYRkqrgFLRc3qDrayg6rrCbJpsKKyMwaykVL8FWusJpp'
            }
        }

Execution failed for task ':app:dataBindingMergeDependencyArtifactsDebug'.
> Could not resolve all files for configuration ':app:debugRuntimeClasspath'.
   > Could not download cardinalmobilesdk-2.2.7-5.aar (org.jfrog.cardinalcommerce.gradle:cardinalmobilesdk:2.2.7-5)
      > Could not get resource 'https://cardinalcommerceprod.jfrog.io/artifactory/android/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-5/cardinalmobilesdk-2.2.7-5.aar'.
         > Could not GET 'https://cardinalcommerceprod.jfrog.io/artifactory/android/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/2.2.7-5/cardinalmobilesdk-2.2.7-5.aar'. Received status code 403 from server: 

To reproduce

1. Go to https://cardinalcommerceprod.jfrog.io/ui/login/
2. Try to login with credentials with username as braintree_team_sdk and password as AKCp8jQcoDy2hxSWhDAUQKXLDPDx6NYRkqrgFLRc3qDrayg6rrCbJpsKKyMwaykVL8FWusJpp

Expected behavior

Successfully login with same credentials to https://cardinalcommerceprod.jfrog.io/ui/login/

Screenshots

[sforsberg]

This may not solve your issue, however those credentials in build.gradle are not login credentials to the jfrog portal, they are instead only valid for the Maven repo requests used to install packages. Example URL using these creds to get the metadata for this package:

curl --location 'https://cardinalcommerceprod.jfrog.io/artifactory/android/org/jfrog/cardinalcommerce/gradle/cardinalmobilesdk/maven-metadata.xml' \
--header 'Authorization: Basic YnJhaW50cmVlX3RlYW1fc2RrOkFLQ3A4alFjb0R5Mmh4U1doREFVUUtYTERQRHg2TllSa3FyZ0ZMUmMzcURyYXlnNnJyQ2JKcHNLS3lNd2F5a1ZMOEZXdXNKcHA='

Yields

<?xml version="1.0" encoding="UTF-8"?>
<metadata modelVersion="1.1.0">
    <groupId>org.jfrog.cardinalcommerce.gradle</groupId>
    <artifactId>cardinalmobilesdk</artifactId>
    <version>2.2.7-5</version>
    <versioning>
        <latest>2.2.7-5</latest>
        <release>2.2.7-5</release>
        <versions>
            <version>2.2.7-3</version>
            <version>2.2.7-4</version>
            <version>2.2.7-5</version>
        </versions>
        <lastUpdated>20240403134935</lastUpdated>
    </versioning>
</metadata>

You can see that the requested version is available, so there may be an intermittent issue over at JFrog not sure. Status indicates no issues today: https://status.jfrog.io/ but there were some a few days ago.

[sforsberg]

There are also several similar issues reported across the various Braintree/PayPal repos:

• CI Build: Could not resolve cardinalmobilesdk: Received status code 403 from server: Forbidden braintree-android-drop-in#325
• https://cardinalcommerceprod.jfrog.io Server Down paypal/android-checkout-sdk#239

[sarahkoop]

We are experiencing two issues related to building the Braintree SDKs with Cardinal:

1. Version 2.2.7-2 of the Cardinal Mobile SDK has become unavailable. Versions of the SDK that point to that version are unable to resolve and build due to that missing dependency. We are actively working with Cardinal to get this version of their SDK available again.
2. Intermittent issues and 503 errors when trying to access existing versions of the Cardinal Mobile SDK from JFrog. We have also reached out to Cardinal and their contacts at JFrog about this. We suggest re-trying since this issue is currently intermittent.

We recognize that this issue preventing builds and CI, so we are urgently working to resolve. We will post an update when we have more information about either and we appreciate your patience!

[fedpre]

I just ran the CI and it worked, thank you for putting out the fix!

[desxz]

Thank you for you help. It's fixed.