unable to feed a DT server with the maven-plugin

[gurucubano]

Hello,
We're unable to upload a bom.xml file with the plugin. I can upload the bom.xml fine with a curl command:

curl --verbose \
    -X "POST" "https://dtrack-m1.XXXXXXX/api/v1/bom" \
    -H 'Content-Type: multipart/form-data' \
    -H "X-Api-Key: XXXXXXXXX" \
    -F "autoCreate=true" \
    -F "projectName=SunRise/XSLNP" \
    -F "projectVersion=0.0.1" \
    -F "bom=@/home/sisis/guru/target/bom.xml"

The result is:

...
* using HTTP/1.x
> POST /api/v1/bom HTTP/1.1
> Host: dtrack-m1.XXXXXXXX
> User-Agent: curl/8.0.1
> Accept: */*
> X-Api-Key: XXXXXXXXXXXX
> Content-Length: 77604
> Content-Type: multipart/form-data; boundary=------------------------d6c0ed1352cb14dc
>
* We are completely uploaded and fine
< HTTP/1.1 200 OK

When I do the same with mvnfrom command line with:

export DEPENDENCY_TRACK_BASE_URL="https://dtrack-m1.XXXXXXXXX/"
export DEPENDENCY_TRACK_API_KEY="XXXXXXXXXXX"
export MAVEN_HOME=/usr/local/apache-maven-3.8.1
export JAVA_HOME=/usr/local/sisis-pap/jdk

export PATH=${MAVEN_HOME}/bin:${PATH}

mvn io.github.pmckeown:dependency-track-maven-plugin:upload-bom \
  -Ddependency-track.dependencyTrackBaseUrl=${DEPENDENCY_TRACK_BASE_URL} \
  -Ddependency-track.apiKey=${DEPENDENCY_TRACK_API_KEY} \
  -Ddependency-track.projectName=SunRise/XSLNP \
  -Ddependency-track.projectVersion=0.0.2

and with this pom.xml configuration:

			<plugin>
				<!--  Dependency-Track Plugin -->
				<groupId>io.github.pmckeown</groupId>
				<artifactId>dependency-track-maven-plugin</artifactId>
                                <version>${version.dependencyTrackMavenPlugin}</version>
				<inherited>true</inherited>
				<executions>
					<execution>
						<phase>install</phase>
						<inherited>true</inherited>
						<goals>
							<goal>upload-bom</goal>
						</goals>
					</execution>
				</executions>

				<configuration>
					<projectName>${dependency.tracker.project}</projectName>
					<pollingConfig>
						<enabled>true</enabled>
						<pause>500</pause>
						<attempts>5</attempts>
						<timeUnit>MILLIS</timeUnit>
					</pollingConfig>
				</configuration>
			</plugin>

It fails with just saying:

[INFO] --- dependency-track-maven-plugin:1.7.0:upload-bom (default-cli) @ XSLNP ---
[INFO] SSL Verification enabled: true
[INFO] Update Project Parent : false
[INFO] Project Name: SunRise/XSLNP
[INFO] Project Version: 0.0.2
[INFO] PollingConfig[attempts=5,enabled=true,pause=500,timeUnit=MILLIS]
[ERROR] Failure integrating with Dependency Track: 400 Bad Request

How could I get more log lines explaining why it is a Bad Request?

[gurucubano]

I found out, that the flag mvn -X ... gives a bit more information:

...
[INFO] SSL Verification enabled: true
[INFO] Update Project Parent : false
[DEBUG] bomLocation not supplied so using: /home/sisis/guru/target/bom.xml
[INFO] Project Name: SunRise/XSLNP
[INFO] Project Version: 0.0.2
[INFO] PollingConfig[attempts=5,enabled=true,pause=500,timeUnit=MILLIS]
[DEBUG] Current working directory: /home/sisis/guru
[DEBUG] looking for bom.xml at /home/sisis/guru/target/bom.xml
[ERROR] Failure integrating with Dependency Track: 400 Bad Request
[DEBUG] Error occurred during upload
io.github.pmckeown.dependencytrack.DependencyTrackException: Failure integrating with Dependency Track: 400 Bad Request
    at io.github.pmckeown.dependencytrack.upload.UploadBomAction.doUpload (UploadBomAction.java:92)
    at io.github.pmckeown.dependencytrack.upload.UploadBomAction.upload (UploadBomAction.java:48)
...

I looked into the mentioned sources UploadBomAction.java ... but don't see what could DT respond with 400 Bad Request