Add gradle checksum

[AZch]

I have this error on starting java lsp

 LSP[jdt.ls] Security Warning! The gradle wrapper 'path/to/project/gradle/wrapper/gradle-wrapper.jar' could be malicious. If you trust it, please
 add 
`{"sha256": "7e3076c1709741964baa432ffd88e8f24627d05daf6d86ed360b09e49ea0ca9b",
"allowed": true}

and trying add checksum to setting but this doesnt work

whats wrong?

java.lua config

local on_attach = function(client, bufnr)
      require'jdtls.setup'.add_commands()
      require'jdtls'.setup_dap()
      require'lsp-status'.register_progress()
      require'compe'.setup {
          enabled = true;
          autocomplete = true;
          debug = false;
          min_length = 1;
          preselect = 'enable';
          throttle_time = 80;
          source_timeout = 200;
          incomplete_delay = 400;
          max_abbr_width = 100;
          max_kind_width = 100;
          max_menu_width = 100;
          documentation = true;

          source = {
            path = true;
            buffer = true;
            calc = true;
            vsnip = false;
            nvim_lsp = true;
            nvim_lua = true;
            spell = true;
            tags = true;
            snippets_nvim = false;
            treesitter = true;
          };
        }

      require'lspkind'.init()
      require'lspsaga'.init_lsp_saga()

      -- Kommentary
      vim.api.nvim_set_keymap("n", "<leader>/", "<plug>kommentary_line_default", {})
      vim.api.nvim_set_keymap("v", "<leader>/", "<plug>kommentary_visual_default", {})

      require'formatter'.setup{
          filetype = {
              java = {
                  function()
                      return {
                          exe = 'java',
                          args = { '-jar', os.getenv('HOME') .. '/.local/jars/google-java-format.jar', vim.api.nvim_buf_get_name(0) },
                          stdin = true
                      }
                  end
              }
          }
      }

      vim.api.nvim_exec([[
        augroup FormatAutogroup
          autocmd!
          autocmd BufWritePost *.java FormatWrite
        augroup end
      ]], true)

      local function buf_set_keymap(...) vim.api.nvim_buf_set_keymap(bufnr, ...) end
      local function buf_set_option(...) vim.api.nvim_buf_set_option(bufnr, ...) end

      buf_set_option('omnifunc', 'v:lua.vim.lsp.omnifunc')

      -- Mappings.
      local opts = { noremap=true, silent=true }
      buf_set_keymap('n', 'gD', '<Cmd>lua vim.lsp.buf.declaration()<CR>', opts)
      buf_set_keymap('n', 'gd', '<Cmd>lua vim.lsp.buf.definition()<CR>', opts)
      buf_set_keymap('n', 'K', '<Cmd>lua vim.lsp.buf.hover()<CR>', opts)
      buf_set_keymap('n', 'gi', '<cmd>lua vim.lsp.buf.implementation()<CR>', opts)
      buf_set_keymap('n', '<C-k>', '<cmd>lua vim.lsp.buf.signature_help()<CR>', opts)
      buf_set_keymap('n', '<leader>wa', '<cmd>lua vim.lsp.buf.add_workspace_folder()<CR>', opts)
      buf_set_keymap('n', '<leader>wr', '<cmd>lua vim.lsp.buf.remove_workspace_folder()<CR>', opts)
      buf_set_keymap('n', '<leader>wl', '<cmd>lua print(vim.inspect(vim.lsp.buf.list_workspace_folders()))<CR>', opts)
      buf_set_keymap('n', '<leader>D', '<cmd>lua vim.lsp.buf.type_definition()<CR>', opts)
      buf_set_keymap('n', '<leader>rn', '<cmd>lua vim.lsp.buf.rename()<CR>', opts)
      buf_set_keymap('n', 'gr', '<cmd>lua vim.lsp.buf.references() && vim.cmd("copen")<CR>', opts)
      buf_set_keymap('n', '<leader>e', '<cmd>lua vim.lsp.diagnostic.show_line_diagnostics()<CR>', opts)
      buf_set_keymap('n', '[d', '<cmd>lua vim.lsp.diagnostic.goto_prev()<CR>', opts)
      buf_set_keymap('n', ']d', '<cmd>lua vim.lsp.diagnostic.goto_next()<CR>', opts)
      buf_set_keymap('n', '<leader>q', '<cmd>lua vim.lsp.diagnostic.set_loclist()<CR>', opts)
      -- Java specific
      buf_set_keymap("n", "<leader>di", "<Cmd>lua require'jdtls'.organize_imports()<CR>", opts)
      buf_set_keymap("n", "<leader>dt", "<Cmd>lua require'jdtls'.test_class()<CR>", opts)
      buf_set_keymap("n", "<leader>dn", "<Cmd>lua require'jdtls'.test_nearest_method()<CR>", opts)
      buf_set_keymap("v", "<leader>de", "<Esc><Cmd>lua require('jdtls').extract_variable(true)<CR>", opts)
      buf_set_keymap("n", "<leader>de", "<Cmd>lua require('jdtls').extract_variable()<CR>", opts)
      buf_set_keymap("v", "<leader>dm", "<Esc><Cmd>lua require('jdtls').extract_method(true)<CR>", opts)

      buf_set_keymap("n", "<leader>cf", "<cmd>lua vim.lsp.buf.formatting()<CR>", opts)

      vim.api.nvim_exec([[
          hi LspReferenceRead cterm=bold ctermbg=red guibg=LightYellow
          hi LspReferenceText cterm=bold ctermbg=red guibg=LightYellow
          hi LspReferenceWrite cterm=bold ctermbg=red guibg=LightYellow
          augroup lsp_document_highlight
            autocmd!
            autocmd CursorHold <buffer> lua vim.lsp.buf.document_highlight()
            autocmd CursorMoved <buffer> lua vim.lsp.buf.clear_references()
          augroup END
      ]], false)

    end



local project_name = vim.fn.fnamemodify(vim.fn.getcwd(), ':p:h:t')
local workspace_dir = '/Users/antonzhuikov/workspace/' .. project_name

config = {
  cmd = {
    'java', -- or '/path/to/java11_or_newer/bin/java'
    '-Declipse.application=org.eclipse.jdt.ls.core.id1',
    '-Dosgi.bundles.defaultStartLevel=4',
    '-Declipse.product=org.eclipse.jdt.ls.core.product',
    '-Dlog.protocol=true',
    '-Dlog.level=ALL',
    '-Xms1g',
        '-javaagent:/Users/antonzhuikov/.local/jars/lombok.jar',
        '-Xbootclasspath/a:/Users/antonzhuikov/.local/jars/lombok.jar',
    '--add-modules=ALL-SYSTEM',
    '--add-opens', 'java.base/java.util=ALL-UNNAMED',
    '--add-opens', 'java.base/java.lang=ALL-UNNAMED',
    '-jar', '/Users/antonzhuikov/.local/share/nvim/lsp_servers/jdtls/plugins/org.eclipse.equinox.launcher_1.6.400.v20210924-0641.jar',
    '-configuration', '/Users/antonzhuikov/.local/share/nvim/lsp_servers/jdtls/config_mac',
    '-data', workspace_dir
  },

   root_dir = require('jdtls.setup').find_root({'.git', 'mvnw', 'gradlew', 'pom.xml', 'gradle.build'}),

   settings = {
     java = {
       implementationsCodeLens = { enabled = true },
       import = {
         gradle = {
           enabled = true,
           wrapper = {
             enabled = true,
             checksums = {
               "7e3076c1709741964baa432ffd88e8f24627d05daf6d86ed360b09e49ea0ca9b",
             },
           }
         }
       }
     }
   },
   on_attach = on_attach,
   init_options = {
     bundles = {}
   },
 }


 config.on_init = function(client, _)
        client.notify('workspace/didChangeConfiguration', { settings = config.settings })
    end

local extendedClientCapabilities = require'jdtls'.extendedClientCapabilities
    extendedClientCapabilities.resolveAdditionalTextEditsSupport = true
    config.init_options = {
      -- bundles = bundles;
      extendedClientCapabilities = extendedClientCapabilities;
    }

require('jdtls').start_or_attach(config)

[mfussenegger]

I suspect the GradleWrapperOption docs in https://github.com/eclipse/eclipse.jdt.ls/wiki/Running-the-JAVA-LS-server-from-the-command-line are wrong and you need to specify the checksums as described in the error message.

See https://github.com/eclipse/eclipse.jdt.ls/blob/6f080e842e36e6721142fde62d8ebe61f63151b0/org.eclipse.jdt.ls.core/src/org/eclipse/jdt/ls/internal/gradle/checksums/WrapperValidator.java#L320-L349

It is looking for objects within the checksums list with a sha256 and allowed key

[AZch]

if i update my config like this, then lsp server doesnt start

     java = {
       implementationsCodeLens = { enabled = true },
       import = {
         gradle = {
           enabled = true,
           wrapper = {
             enabled = true,
             checksums = {
               {
                 sha256: '7e3076c1709741964baa432ffd88e8f24627d05daf6d86ed360b09e49ea0ca9b',
                 allowed: true
               }
             },
           }
         }
       }
     }

and configuration have this GradleWrapperOptions

interface GradleWrapperOption {
        enabled?: boolean;
        checksums?: string[];
}

[mfussenegger]

Can you check the logs and the troubleshooting section? Could be that eclipse.jdt.ls has troubles loading your project.

[HandOfGod94]

I, myself also faced this issue and spent two days trying to figure out why it's happening.
There are multiple things that can help resolve the issue:

1. LSP didn't start. Why? because of wrong syntax.

checksums = {
  {
    sha256: '7e3076c1709741964baa432ffd88e8f24627d05daf6d86ed360b09e49ea0ca9b',
    allowed: true
  }
}
-- ^ This is wrong syntax, as key value pair in lua can't be denoted with `:`. Since syntax was wrong, the server won't start.
-- So correct syntax, is
checksums = {
  {
    sha256 = '7e3076c1709741964baa432ffd88e8f24627d05daf6d86ed360b09e49ea0ca9b',
    allowed = true
  }
}

2. The correct java config to set checksum is actually java.imports.gradle.wrapper.checksums and not java.import.gradle.wrapper.checksum refer. Notice imports vs import. As @mfussenegger mentioned, the eclipse.jdt.ls wiki page describing the config is outdated. So the correct config should be (using the example mentioned)

java = {
  implementationsCodeLens = { enabled = true },
  imports = { -- <- this
    gradle = {
      enabled = true,
      wrapper = {
        enabled = true,
        checksums = {
          {
             sha256 = '7e3076c1709741964baa432ffd88e8f24627d05daf6d86ed360b09e49ea0ca9b',
             allowed = true
           }
         },
       }
     }
   }
}

3. Keeping it in settings config won't work. Even though it's a workspace config, the checksums are analyzed during initialization of server, in the initialize request of LSP (More on this). InitializationParams can be passed to jdtls using init_options config. i.e. the checksum config should be in the init_options.settings

init_options = {
  settings = {
    -- Add java.imports.gradle.wrapper.checksums here.
  }
}

Bonus: I have also noticed that old gradle version acts up really weird with new java version required by LSP. So it's good to setup java.import.gradle.java.home as well.