<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><br><div>
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>—</div><div>Tadeas Kriz</div></div>
</div>
<br><div><div>On 25 Jul 2014, at 11:04 am, Daniel Bevenius <<a href="mailto:daniel.bevenius@gmail.com">daniel.bevenius@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">><span style="font-family:arial,sans-serif;font-size:13px">5. don’t use the url as a deviceToken (might not comply with Mozzila’s SimplePush specs)</span><div><span style="font-family:arial,sans-serif;font-size:13px">The deviceToken is an UPS concept and there is nothing in the SimplePush spec which is violated in this case. </span></div>
<div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div></div></blockquote><div>I thought that deviceTokens were changed from a generated value to the URL just to comply with Mozzila’s SimplePush specs. Matzew, why was the generated token removed then?</div><br><blockquote type="cite"><div dir="ltr"><div><span style="font-family:arial,sans-serif;font-size:13px">I'm not sure about what the best option is for UPS thought. Would a regex in for the @Path annotation work perhaps, something like:</span></div>
<div><span style="font-family:arial,sans-serif;font-size:13px"> </span></div><div><div style=""><font face="arial, sans-serif">@DELETE</font></div><div style=""><font face="arial, sans-serif">@Path("{token, .+}")</font></div>
<div style=""><font face="arial, sans-serif">public Response unregisterInstallations(</font></div></div></div><div class="gmail_extra"><br></div></blockquote><div><br></div><div>What do you mean by that regex? The problem is simply the “%2F” in the token (which is an URLencoded simplepush url) and it’s being revoked long before it hits the RestEasy (which does the routing according to what’s in the @Path).</div><br><blockquote type="cite"><div class="gmail_extra"><br><div class="gmail_quote">On 25 July 2014 10:32, Tadeas Kriz <span dir="ltr"><<a href="mailto:tkriz@redhat.com" target="_blank">tkriz@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
—<br>
Tadeas Kriz<br>
<br>
On 24 Jul 2014, at 05:44 pm, Karel Piwko <<a href="mailto:kpiwko@redhat.com">kpiwko@redhat.com</a>> wrote:<br>
<br>
> On Thu, Jul 24, 2014 at 3:28 PM, Tadeas Kriz <<a href="mailto:tkriz@redhat.com">tkriz@redhat.com</a>> wrote:<br>
>><br>
>> It should not. For hibernate, it’s just a string like any other.<br>
>> The problem might be in the configuration of <a href="http://jax.rs/RestEasy" target="_blank">JAX.RS/RestEasy</a>. If<br>
>> I’ll have some time today evening, I’ll try to fix it, it should<br>
>> be an easy fix.<br>
><br>
> Last famous words? ;-)<br>
><br>
<br>
I shall never say “an easy fix” again.<br>
<br>
> But I agree. Everything is string and URL encode should happen on<br>
> client while server should automatically decode and work always with<br>
> just decoded string. If we need to encode twice, something is wrong.<br>
><br>
<br>
Anyway, the 400 Bad request response is made by the tomcat itself, disallowing the use of %2F as a path parameter. This will probably apply on other web containers.<br>
<br>
Possible solutions with their disadvantages:<br>
<br>
1. well-documented double-encoding of the URL (might be confusing)<br>
2. use @QueryParam instead of @PathParam (breaks the api consistence, as every other call would still use @PathParam)<br>
3. allow @QueryParam (again, breaks the api consistence, but only for the SimplePush)<br>
4. find another encoding (Base64 for URL = URLEncode then Base64 encode)<br>
5. don’t use the url as a deviceToken (might not comply with Mozzila’s SimplePush specs)<br>
<br>
What do you think guys?<br>
<br>
>><br>
>><br>
><br>
><br>
> _______________________________________________<br>
> aerogear-dev mailing list<br>
> <a href="mailto:aerogear-dev@lists.jboss.org">aerogear-dev@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/aerogear-dev</a><br>
<br>
<br>
_______________________________________________<br>
aerogear-dev mailing list<br>
<a href="mailto:aerogear-dev@lists.jboss.org">aerogear-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/aerogear-dev</a><br>
</blockquote></div><br></div>
_______________________________________________<br>aerogear-dev mailing list<br><a href="mailto:aerogear-dev@lists.jboss.org">aerogear-dev@lists.jboss.org</a><br>https://lists.jboss.org/mailman/listinfo/aerogear-dev</blockquote></div><br></body></html>