I cant load a Wordpress page. I get POST /wp-admin/admin-ajax.php [HTTP/2 500 Internal Server Error] - ajax

I have a portal page that is stuck on the preloader. In the Inspector, it throws this error:
POST https://####/wp-admin/admin-ajax.php[HTTP/2 500 Internal Server Error 5675ms]
Below that, there is these error messages:
Status: 500 Internal Server Error
Version: HTTP/2
Transferred: 726 B (241 B size)
Referrer Policy: strict-origin-when-cross-origin
RESPONSE HEADERS
access-control-allow-credentials: true
access-control-allow-origin: https://####
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
date: Sun, 30 Oct 2022 08:45:32 GMT
expires: Wed, 11 Jan 1984 05:00:00 GMT
referrer-policy: strict-origin-when-cross-origin
server: Apache
x-content-type-options: nosniff
X-Firefox-Spdy: h2
x-frame-options: SAMEORIGIN
x-robots-tag: noindex
REQUEST HEADERS
Accept: application/json, text/javascript, */*; q=0.01
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.5
Connection: keep-alive
Content-Length: 1242
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Cookie: wordpress_sec_43463c74c2bcdfa8f63c308437d1e9a2=########.com%7C1668185768%7C3RDSuJIwsueKkV0XMKCFD8aYWn14tchxzW5ygy5ZT2V%7Cc98e394e223dbf6e592589722ee40693641c42b27df660dc8bf0d307d26d1bb8; wordpress_logged_in_43463c74c2bcdfa8f63c308437d1e9a2=rreis%40ejme.com%7C1668185768%7C3RDSuJIwsueKkV0XMKCFD8aYWn14tchxzW5ygy5ZT2V%7Caa83aa2070723dd4047efdf67a1d3681a827359dfac09e97fe3ebf5156f6c343; wp-settings-175=editor%3Dtinymce; wp-settings-time-175=1666975646; wpc_key=BcD%26y9QHSMt%21mygJDcMm; PHPSESSID=ac2505ebc1aa49f5748064cb9bbfc233; sc_is_visitor_unique=rx11212407.1667119532.8D619E70C6CF4F2F03D9DB342E78DFB3.2.2.2.2.2.2.2.1.1
Host: www.####.co.uk
Origin: https://www.####.co.uk
Referer: https://www.####.co.uk/portal/portal-hub/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:106.0) Gecko/20100101 Firefox/106.0
X-Requested-With: XMLHttpRequest
Can anybody tell what is throwing the error? And is this why the page wont load?
Thanks

Related

Getting Invalid CSRF Token while replaying the script

I am facing some weird problem while replaying my recorded script. I have correlated everything and for rest of the steps the CSRF token is working fine but for the below step its giving error for me.
The recorded script is:
web_add_header("X-CSRF-TOKEN",
"1f285aef-f9b1-4709-a76b-6789e785ca8a");
web_add_header("X-Requested-With",
"XMLHttpRequest");
lr_think_time(33);
web_custom_request("saveScheduleAcademyMapping",
"URL=http://localhost:8080/ams/saveScheduleAcademyMapping",
"Method=POST",
"Resource=0",
"RecContentType=application/json",
"Referer=http://localhost:8080/ams/manage_academy?scheduleInstanceId={scheduleID}",
"Snapshot=t1553.inf",
"Mode=HTTP",
"EncType=application/json; charset=UTF-8",
"Body=[{JSON values]",
LAST);
Below are the request and response while recording and replaying the script
For Recording
Request:
POST /ams/saveScheduleAcademyMapping HTTP/1.1
Host: localhost:8080
Connection: keep-alive
Content-Length: 791
Accept: */*
Origin: http://localhost:8080
X-CSRF-TOKEN: 1f285aef-f9b1-4709-a76b-6789e785ca8a
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36
Content-Type: application/json; charset=UTF-8
Referer: http://localhost:8080/ams/manage_academy?scheduleInstanceId=230044
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Cookie: JSESSIONID=B9C8BB02040E49246E1C7BA4CC16F6CF
[{JSON VALUE}]
Response:
HTTP/1.1 200
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
X-Application-Context: application:dev
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Date: Wed, 25 Apr 2018 12:09:17 GMT
[{JSON VALUE}]
For Replay:
Request:
POST /ams/saveScheduleAcademyMapping HTTP/1.1
Content-Type: application/json; charset=UTF-8
Referer: http://localhost:8080/ams/manage_academy?scheduleInstanceId=230046
Origin: http://localhost:8080
X-CSRF-TOKEN: 1f285aef-f9b1-4709-a76b-6789e785ca8a
X-Requested-With: XMLHttpRequest
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Accept: */*
Connection: Keep-Alive
Host: localhost:8080
Cookie: JSESSIONID=E61AF0BA93B173F3D597244508FE11DD
Content-Length: 791
[{JSON VALUE}]
Response:
HTTP/1.1 403
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json;charset=UTF-8
Transfer-Encoding: chunked
Date: Wed, 25 Apr 2018 12:25:05 GMT
{"timestamp":"2018-04-25T12:25:05.690+0000","status":403,"error":"Forbidden","message":"Invalid CSRF Token '1f285aef-f9b1-4709-a76b-6789e785ca8a' was found on the request parameter '_csrf' or header 'X-CSRF-TOKEN'.","path":"/ams/saveScheduleAcademyMapping"}
Can anyone help me with this.
Its weird to answer my question itself but need to close it hence postintg it.
Just correlated one more time and added the lines in script like below and its working now. using web_reg_save_param_ex() function fetched the CSRF and used it.
web_add_header("X-CSRF-TOKEN",
"{CSRF}");
web_add_header("X-Requested-With",
"XMLHttpRequest");

Firefox ignoring CORS method

I'm implementing a web service with CORS support. Everything works fine, except when I issue a DELETE request. Firefox sends the following preflight:
OPTIONS /node-configuration?sessionId=cee013ce-53e6-11e6-8929-7efd7b6db237&address=127.0.0.1&port=8043 HTTP/1.1
Host: 127.0.0.1:8032
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: DELETE
Origin: XXX
Connection: keep-alive
And the server responds with:
HTTP/1.1 200 OK
Content-Length: 0
Strict-Transport-Security: max-age=31536000; includeSubDomains
Access-Control-Allow-Origin: XXX
Access-Control-Allow-Method: POST, GET, DELETE, OPTIONS
As you can see, DELETE is in the Access-Control-Allow-Method header. But when I send the request:
DELETE /node-configuration?sessionId=cee013ce-53e6-11e6-8929-7efd7b6db237&address=127.0.0.1&port=8043
Accept: application/json, text/plain, */*
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.5
Connection: keep-alive
Host: 127.0.0.1:8032
Origin: XXX
Referer: XXX
User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0
Firefox blocks it: method not found in CORS „Access-Control-Allow-Methods”
Am I missing something?
The header is called Access-Control-Allow-Methods, you missed out the s on the end in the response header.

Google CalDAV: Bad request on PUT event

I'm developing a calendar client using CalDAV. I'm trying to create an event on my Google calendar. What's wrong with the PUT request at the end causing Bad request error?
Here's log for my first two successful requests and the Bad! PUT request:
Request options:
OPTIONS https://apidata.googleusercontent.com/caldav/v2/altostratous#gmail.com/events/ HTTP/1.1
Authorization: Bearer ya29.Ci_5AnP1bx1kKPhytjF3axMpsMhqhYppH2RsRhgn64Nnpun8KW3Eb9PV2aT8vlsTyA
Host: apidata.googleusercontent.com
Content-Length: 0
Connection: Keep-Alive
Options response:
HTTP/1.1 200 OK
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 06 Jun 2016 10:27:23 GMT
Allow: DELETE, GET, HEAD, OPTIONS, PROPFIND, PROPPATCH, PUT, REPORT
Content-Disposition: attachment
DAV: 1, calendar-access, calendar-schedule, calendar-auto-schedule, calendar-proxy
Vary: Origin
Vary: X-Origin
Content-Type: text/plain
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 0
Server: GSE
Alternate-Protocol: 443:quic
Alt-Svc: quic=":443"; ma=2592000; v="34,33,32,31,30,29,28,27,26,25"
Request calendars:
PROPFIND https://apidata.googleusercontent.com/caldav/v2/altostratous#gmail.com/events/ HTTP/1.1
Authorization: Bearer ya29.Ci_5AnP1bx1kKPhytjF3axMpsMhqhYppH2RsRhgn64Nnpun8KW3Eb9PV2aT8vlsTyA
Depth: 0
Host: apidata.googleusercontent.com
Content-Type: text/xml
Content-Length: 103
<options xmlns="DAV:">
<calendar-collection-set xmlns="urn:ietf:params:xml:ns:caldav" />
</options>
Calendars response:
HTTP/1.1 207 Multi-Status
Vary: X-Origin
Content-Type: text/xml; charset=UTF-8
Date: Mon, 06 Jun 2016 10:27:24 GMT
Expires: Mon, 06 Jun 2016 10:27:24 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alternate-Protocol: 443:quic
Alt-Svc: quic=":443"; ma=2592000; v="34,33,32,31,30,29,28,27,26,25"
Accept-Ranges: none
Vary: Origin,Accept-Encoding
Transfer-Encoding: chunked
39d
<?xml version="1.0" encoding="UTF-8"?>
<D:multistatus xmlns:D="DAV:" xmlns:caldav="urn:ietf:params:xml:ns:caldav" xmlns:cs="http://calendarserver.org/ns/" xmlns:ical="http://apple.com/ns/ical/">
<D:response xmlns:carddav="urn:ietf:params:xml:ns:carddav" xmlns:cm="http://cal.me.com/_namespace/" xmlns:md="urn:mobileme:davservices">
<D:href>/caldav/v2/altostratous#gmail.com/events/</D:href>
<D:propstat>
<D:status>HTTP/1.1 200 OK</D:status>
<D:prop>
<D:displayname>altostratous#gmail.com</D:displayname>
<D:getcontenttype>text/calendar; component=vevent</D:getcontenttype>
<cs:getctag>63600884682</cs:getctag>
<ical:calendar-color>#2952A3FF</ical:calendar-color>
<caldav:calendar-description>altostratous#gmail.com</caldav:calendar-description>
<D:resourcetype>
<D:collection/>
<caldav:calendar/>
</D:resourcetype>
</D:prop>
</D:propstat>
</D:response>
</D:multistatus>
0
PUT request:
PUT https://apidata.googleusercontent.com/caldav/v2/altostratous#gmail.com/events/fc4eae83-a429-4cd0-8d1e-4adbf9771969.ics HTTP/1.1
Authorization: Bearer ya29.Ci_5AnP1bx1kKPhytjF3axMpsMhqhYppH2RsRhgn64Nnpun8KW3Eb9PV2aT8vlsTyA
Host: apidata.googleusercontent.com
If-None-Match: *
Content-Type: text/calendar
Content-Length: 283
BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//tracky/iCal//FUBU v1.0//EN
BEGIN:VEVENT
UID:fc4eae83-a429-4cd0-8d1e-4adbf9771969
DESCRIPTION:this is a description
DTSTAMP:20160606T102724Z
LAST-MODIFIED:20160606T102724Z
SEQUENCE:-2147483647
SUMMARY:summary
END:VEVENT
END:VCALENDAR
PUT response:
HTTP/1.1 400 Bad Request
Vary: X-Origin
Content-Type: text/xml; charset=UTF-8
Date: Mon, 06 Jun 2016 10:27:24 GMT
Expires: Mon, 06 Jun 2016 10:27:24 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alternate-Protocol: 443:quic
Alt-Svc: quic=":443"; ma=2592000; v="34,33,32,31,30,29,28,27,26,25"
Accept-Ranges: none
Vary: Origin,Accept-Encoding
Transfer-Encoding: chunked
41
<?xml version="1.0" encoding="UTF-8"?>
<D:error xmlns:D="DAV:"/>
0
Your VEVENT has an invalid SEQUENCE property:
SEQUENCE:-2147483647
That should be 1 if the event is fresh ...
But the primary issue is that it has no DTSTART property and no DTEND (or DURATION) property. What's an event w/o a time ;->

h:commandButton calling action but not redirecting

I have a h:commandButton associated with a method, on clicking the button the action method is executed but the redirect does not take place.
'xhtml snippet'
<h:commandButton id="update" value="save"
onclick="if( validate('submitForm')==true){ updateProperty();} else{ return false;}"
action="#{propertyBean.update}"
class="btn btn-green btn-lg arabic"
rendered="#{propertyBean.isNew == false}">
<f:param name="propertyId" value="#{propertyBean.property.id}">
</f:param>
</h:commandButton>
'bean snippet'
public String update() {
System.out.println("in update method");
return "/success.xhtml";
}
Update
This is a snippet of the network monitor, the response is correct even though the page displayed and the URL in the browser are wrong
POST /Newgar_revamp/pages/add.xhtml HTTP/1.1
Host: localhost:8080
Connection: keep-alive
Content-Length: 2207
Pragma: no-cache
Cache-Control: no-cache
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: http://localhost:8080
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.86 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryFE3725BjJXsA1xKf
Referer: http://localhost:8080/Newgar_revamp/pages/add.xhtml?propertyId=3
Accept-Encoding: gzip, deflate
Accept-Language: en-GB,en-US;q=0.8,en;q=0.6,ar;q=0.4
Cookie: JSESSIONID=B81FF21F23988CC8C98D84DA14B36F54
HTTP/1.1 302 Found
Server: Apache-Coyote/1.1
Location: http://localhost:8080/Newgar_revamp/pages/status/success.xhtml
Content-Length: 0
Date: Fri, 20 Nov 2015 21:24:32 GMT

Why does nexus poke remote repository when the file is already cached

I have a nexus server installed and configured to connect to several remote repository. One of them is http://www.hibernatespatial.org/repository/ as we have a dependency on
<dependency>
<groupId>org.hibernate</groupId>
<artifactId>hibernate-spatial</artifactId>
<version>4.0</version>
<type>jar</type>
</dependency>
The dependency is resolved, downloaded to nexus and cached on disk. However, nexus is slow to server the file even after the initial request. I confirmed that it was written on disk on the nexus server.
I enabled the debug log and traced the network activity and it still attempt to connect to remove repo:
192.168.116.040.39206-199.019.214.133.00080: GET /org/hibernate/hibernate-
spatial/4.0/hibernate-spatial-4.0.pom HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip,deflate,identity
Cache-Control: no-cache
Host: maven.jdkcn.com
Connection: Keep-Alive
User-Agent: Nexus/2.6.4-02 (OSS; Linux; 2.6.32-26-pve; i386; 1.7.0_45) apacheHttpClient4x/2.6.4-02
Cookie: JSESSIONID=3B558A150F45899EFC9B59A10665AE2A
Cookie2: $Version=1
**199.019.214.133.00080-192.168.116.040.39206: HTTP/1.0 404 Not Found**
Server: nginx/1.4.7
Date: Wed, 13 Aug 2014 21:11:56 GMT
Content-Type: text/html;charset=UTF-8
X-Cache: MISS from felicitas.8d.com
X-Cache-Lookup: MISS from felicitas.8d.com:3128
Via: 1.1 felicitas.8d.com:3128 (squid/2.7.STABLE9)
Connection: close
199.019.214.133.00080-192.168.116.040.39206:
<html>
<head>
<title>404</title>
</head>
<body>
<h1>oh, not found your page.</h1>
</body>
</html>
192.168.116.040.58909-137.254.120.026.00080: GET /maven/2/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip,deflate,identity
Cache-Control: no-cache
Host: download.java.net
Connection: Keep-Alive
User-Agent: Nexus/2.6.4-02 (OSS; Linux; 2.6.32-26-pve; i386; 1.7.0_45) apacheHttpClient4x/2.6.4-02
**137.254.120.026.00080-192.168.116.040.58909: HTTP/1.0 404 Not Found**
Server: Sun-Java-System-Web-Server/7.0
Date: Wed, 13 Aug 2014 20:37:55 GMT
Content-Type: text/html
Content-Length: 292
X-Cache: MISS from felicitas.8d.com
X-Cache-Lookup: MISS from felicitas.8d.com:3128
Via: 1.1 felicitas.8d.com:3128 (squid/2.7.STABLE9)
Connection: close
137.254.120.026.00080-192.168.116.040.58909: <HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=ISO-8859-1"><TITLE>Not Found</TITLE></HEAD>
<H1>Not Found</H1> The requested object does not exist on this server. The link you followed is either outdated, inaccurate, or the server has been instructed not to let you have it.
192.168.116.040.58910-137.254.120.026.00080: GET /maven/glassfish/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip,deflate,identity
Cache-Control: no-cache
Host: download.java.net
Connection: Keep-Alive
User-Agent: Nexus/2.6.4-02 (OSS; Linux; 2.6.32-26-pve; i386; 1.7.0_45) apacheHttpClient4x/2.6.4-02
**137.254.120.026.00080-192.168.116.040.58910: HTTP/1.0 404 Not Found**
Server: Sun-Java-System-Web-Server/7.0
Date: Wed, 13 Aug 2014 20:37:55 GMT
Content-Type: text/html
Content-Length: 292
X-Cache: MISS from felicitas.8d.com
X-Cache-Lookup: MISS from felicitas.8d.com:3128
Via: 1.1 felicitas.8d.com:3128 (squid/2.7.STABLE9)
Connection: close
137.254.120.026.00080-192.168.116.040.58910: <HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=ISO-8859-1"><TITLE>Not Found</TITLE></HEAD>
<H1>Not Found</H1> The requested object does not exist on this server. The link you followed is either outdated, inaccurate, or the server has been instructed not to let you have it.
192.168.116.040.48686-107.023.147.174.00080: GET /maven2/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip,deflate,identity
Cache-Control: no-cache
Host: jasperforge.org
Connection: Keep-Alive
User-Agent: Nexus/2.6.4-02 (OSS; Linux; 2.6.32-26-pve; i386; 1.7.0_45) apacheHttpClient4x/2.6.4-02
**107.023.147.174.00080-192.168.116.040.48686: HTTP/1.0 403 Forbidden**
Date: Wed, 13 Aug 2014 21:11:57 GMT
Server: Apache/2.2.15 (CentOS)
Content-Length: 351
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from felicitas.8d.com
X-Cache-Lookup: MISS from felicitas.8d.com:3128
Via: 1.1 felicitas.8d.com:3128 (squid/2.7.STABLE9)
Connection: close
107.023.147.174.00080-192.168.116.040.48686: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>403 Forbidden</title>
</head><body>
<h1>Forbidden</h1>
<p>You don't have permission to access /maven2/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom
on this server.</p>
<hr>
<address>Apache/2.2.15 (CentOS) Server at jasperforge.org Port 80</address>
</body></html>
192.168.116.040.42250-074.205.095.173.00080: GET /artifactory/repo/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip,deflate,identity
Cache-Control: no-cache
Host: repository.pentaho.org
Connection: Keep-Alive
User-Agent: Nexus/2.6.4-02 (OSS; Linux; 2.6.32-26-pve; i386; 1.7.0_45) apacheHttpClient4x/2.6.4-02
Cookie: JSESSIONID=E432F1D78CE8B6F63C2F04F325926A34
Cookie2: $Version=1
I also see in the logs:
2014-08-13 17:13:51 DEBUG [qtp20879656-157423 - /nexus/content/groups/public/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom] xavier org.sonatype.nexus.proxy.maven.maven2.M2GroupRepository - Item ResourceStoreRequest{requestPath='/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom', requestContext=RequestContext{this={request.address=192.168.142.59, request.isConfidential=true, request.remoteOnly=false, request.url=https://nexus.priv.8d.com:2443/nexus/content/groups/public/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom, request.user=xavier, request.localOnly=false, request.agent=Wget/1.15 (linux-gnu), request.asExpired=false, request.appRootUrl=https://nexus.priv.8d.com:2443/nexus, request.external=true}, parent=null}, pathStack=[/groups/public/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom], processedRepositories=[public], appliedMappings={}} not found in local storage.
However, if a use the browse storage tab in the nexus management interface, I can see the file.
Any idea?
May i misunderstand you question but what does this error message mean:
<h1>Forbidden</h1>
<p>You don't have permission to access /maven2/org/hibernate/hibernate-spatial/4.0/hibernate-spatial-4.0.pom
on this server.</p>
<hr>
<address>Apache/2.2.15 (CentOS) Server at jasperforge.org Port 80</address>
</body></html>
So i assume you are not allowed to access this repository or there was a temporarily problem with that repository.

Resources