Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-17537

Nuget API v3 feed for remote nuget repositories is not getting updated with the latest index.json of a package

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 6.1.0, 6.0.1, 6.3.0, 6.3.2, 6.3.3
    • Fix Version/s: 6.6.3
    • Component/s: NuGet
    • Labels:
      None
    • Sprint:
      Leap 35

      Description

      Nuget API v3 feed for remote nuget repositories is not getting updated with the latest index.json of a package. The metadata file for API v3 which is a index.json file is not getting expired in the nuget remote cache. Due to this when there is an update in nuget gallery for a package, the download request for the newer version of the package fails as Artifactory is always giving the index.json of the requested package from the cache.

       

      Issue is reproducible in 6.0.1, 6.1.0 and the latest 6.3.3 version as well.

       

      Steps to Reproduce:

      1. Create a Nuget remote repository in Artifactory and set the "metadata retrieval cache period" to 10 seconds to easily reproduce the issue.

      2. Request the following metadata file for the "hotchocolate" nuget package using the below URL:

      http://localhost:8081/artifactory/api/nuget/v3/nuget-remote/registration-semver2/hotchocolate/index.json

      3. The index.json file will be cached in the nuget remote cache in Artifactory.

      4. Wait for more than 30 seconds and try to downloading the same index.json for the "hotchocolate" package from the nuget remote cache repo and you will see that the download is successful. The expected behavior is that the request should result in a HTTP 404 message after the metadata is expired based on the metadata retrieval cache setting .

      http://localhost:8081/artifactory/api/nuget/v3/nuget-remote-cache/registration-semver2/hotchocolate/index.json

      Due to this behavior, if there is a new version of "hotchocolate" package available in nuget.org, the request for this new version would fail as Artifactory keeps giving the index.json that is already cached in the remote repository. 

        Attachments

          Activity

            People

            • Assignee:
              Dudim Dudi Morad
              Reporter:
              nihalc@jfrog.com Nihal Reddy Chinna Choudhary
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: