User Guide question
by Ron Sigal
I'm updating the User Guide, which references AS 7 and EAP 6, and I have
a question. Should we even be referencing EAP from Resteasy? Mixing
projects and products?
--
My company's smarter than your company (unless you work for Red Hat)
9 years
RESTEASY-1486 and jackson
by Ron Sigal
I see in https://access.redhat.com/articles/2158031 "JBoss Enterprise
Application Platform (EAP) 7 Included Modules" that jackson modules are
listing as "private" and jackson2 modules are "public".
Is that also true for Wildfly 10? I'm not sure how to tell. I see,
though, that
https://docs.jboss.org/author/display/WFLY10/Implicit+module+dependencies...
references org.jboss.resteasy.resteasy-jackson-provider.
What I'm asking, really, is: Do we need to support jackson?
Also, I've been meaning to suggest that we do away with
resteasy-jboss-modules-<version>.zip(for AS 7) and rename
resteasy-jboss-modules-wf8-<version>.zip to
resteasy-jboss-modules-wf-<version>.zip (that is, get rid of the "8" in
"wf8").
-Ron
--
My company's smarter than your company (unless you work for Red Hat)
9 years
RESTEasy global settings for all deployments
by Marek Kopecky
Hi Alessio.
I'm thinking about global RESTEasy settings in server. Currently, there
are no option for change of global RESTEasy settings for all deployment.
All RESTEasy settings needs to be done in deployment.
Ideally global RESTEasy settings should be available from WildFly CLI.
*Example: *Let's say that server admin needs to disable
DataSourceProvider for all deployments on server. Now, AFAIK, he needs to:
* set "resteasy.use.builtin.providers" property in web.xml of all
deployments to "false"
o It disable all default providers.
* explicitly set providers used in each deployment by
"resteasy.providers" property in web.xml of all deployments
These steps are really uncomfortable, server admin needs to manually
update all deployments in server. Ideally WildFly server admin could be
able to disable DataSourceProvider by CLI. But at least server admin
could beable to disable DataSourceProvider by system properties.
We can create feature request for this, WDYT?
Marek
9 years
Most used Providers in Resteasy?
by Katerina Novotna
Hi all,
Do you know about which providers are mostly used in resteasy?
I can only guess that jaxb and jackson providers will be used widely, but would welcome any suggestions.
Thanks.
-- Katka
9 years
HttpClient question
by Ron Sigal
Hi Rebecca,
I finally figured out my problem with respect to RESTEASY-1484
"CVE-2016-6346: Abuse of GZIPInterceptor in can lead to denial of
service attack". I want to impose a maximum size on the file that gets
unzipped, and I was having a problem when the payload was going from
server to client. It turns out that, by default, HttpClient will deflate
a gzipped payload, so, by the time Resteasy gets it, it's already
unzipped. That behavior can be turned off with:
> protected HttpClient createDefaultHttpClient()
> {
> final HttpClientBuilder builder = HttpClientBuilder.create();
> RequestConfig.Builder requestBuilder = RequestConfig.custom();
> if(defaultProxy != null)
> {
> requestBuilder.setProxy(defaultProxy);
> }
> builder.disableContentCompression(); // <<===
> builder.setDefaultRequestConfig(requestBuilder.build());
> return builder.build();
> }
Do you see any problem with that?
Thanks,
Ron
--
My company's smarter than your company (unless you work for Red Hat)
9 years
