March 2017 - undertow-dev - Jboss List Archives

Correctly shutting down a websocket handler

by Robin Anil

When a client disconnects, I see that onClose is not being fired. The only way this seems to be firing if client sents a close frame. Is there any way to detect disconnection and immediately close all the opened resources. Robin Robin Anil | Software Engineer

7 months

5
5
0 / 0

Is it ok to do a blocking action from a Receiver callback?

by Michael Grove

If I have some code ala theRequest.getRequestReceiver().receiveFullString((theExchange, str) -> { ... }); Is it ok to perform a time consuming task w/ the body of the request in the callback, or is it better to move off the io thread and use `HttpServerExchange.getInputStream`? Cheers, Mike

7 years

3
5
0 / 0

Re: [undertow-dev] Howto create/configure a custom SessionManager and SessionConfig implementation?

by Eric B

Thanks for the link; that is definitely going to be a big help for the redis bridge. But I'm still unclear as to the "right" way to use/define my own SessionConfig implementation. In the link you sent, they instantiate the RedisManager with the existing SessionConfig object, and use whatever undertow passes in the parameters. As I mentioned in my earlier post, I suspect I can hack around it using the SessionConfigWrapper but that does not seem to respect the spirit or intent of the wrapper, so I'm trying to figure out if there is another/better way to do this. Or is the only solution to completely ignore the SessionConfig object and build my solution independent of it? But then it will not respect the contract of the SessionManager to retrieve the Sessionid from the SC object. Thanks, Eric On Mar 29, 2017 8:00 AM, "Antoine Girard" <antoine.girard(a)ymail.com> wrote: Hi Eric, Unfortunately I cannot share that code as it's company property. As far as I can remember, it was really easy. I used the java redis library: Jedis. Oh, and look what I found: https://github.com/coat/undertow-redis-session/blob/ master/src/main/java/com/pedanticprogrammer/undertow/ RedisSessionManager.java That's a good starting point, if not the complete solution right there. Cheers, Antoine On Wed, Mar 29, 2017 at 1:48 PM, Eric B <ebenzacar(a)gmail.com> wrote: > Antoine, > > That's exactly where I am heading too. Is there any chance you still have > our can share the code you used to do that? > > Thanks, > > Eric > > On Mar 29, 2017 7:24 AM, "Antoine Girard" <antoine.girard(a)ymail.com> > wrote: > >> I did a similar thing once: persisting sessions into a Redis data store >> My starting point was the InMemorySessionManager. >> >> Good luck to you! >> >> Cheers, >> Antoine >> >> On Wed, Mar 29, 2017 at 1:09 PM, Eric B <ebenzacar(a)gmail.com> wrote: >> >>> From my understanding, I was thinking/planning to create my own >>> SessionManager to handle the Session loading. And from the docs, it >>> indicates that the SessionManager must delegate retrieving the sessionId to >>> the SessionConfig object >>> >>> Am I heading down the wrong path? Is there an easier/another way to >>> load/persist the session? >>> >>> Thanks >>> >>> Eric >>> >>> >>> >>> On Mar 29, 2017 7:01 AM, "Bill O'Neil" <bill@dartalleycom> wrote: >>> >>> If you want such a custom solution why not just use a cookie and ignore >>> all of the SessionConfig code. You can write a handler that checks for >>> the cookie and attaches your own custom session object to the exchange >>> based on the cookie. >>> >>> On Tue, Mar 28, 2017 at 9:41 PM, Eric B <ebenzacar(a)gmail.com> wrote: >>> >>>> Stuart, >>>> >>>> My goal is to actually replace the JSESSIONID cookie/mechanism with my >>>> own mechanism. I am looking to use a JsonWebToken (JWT) to pass my >>>> JSESSIONID to the application for a few different reasons: >>>> 1) I would like to sign the JSESSIONID >>>> 2) I would like to pass additional data along with the JSESSIONID (ex: >>>> some auth claims) >>>> 3) I want to be able to share this information between different >>>> containers >>>> 4) I want to pass a TTL with my token >>>> >>>> >>>> At some level, I am trying to hack together an SSO solution temporarily >>>> which would allow me to log into one container, and have some credentials >>>> pass to another container. My issue is that both containers are session >>>> based, and hence, need to be able to retrieve a session from a sessionId. >>>> However, I also want to make sure that sessions don't expire - that is if I >>>> am working in container 2, that my session in container 1 continues to live >>>> (if the user gets redirected back to container 1). >>>> >>>> So, in essence, I am looking to be able to extract my SessionId from a >>>> mechanism other than the standard JSESSIONID cookie, but yet, still >>>> continue to use the sessions seamlessly. >>>> >>>> I figure I could potentially hack around the design using the >>>> SessionConfigWrapper in which I use the wrap() method to return my own >>>> SessionConfig object, but that does not seem to fit in the spirit or design >>>> of the wrapper. >>>> >>>> Is there another/better way to accomplish something like this? Or is >>>> undertow designed with only the JSESSIONID cookie in mind? I did notice >>>> the >>>> SessionConfig.SessionCookieSource enum with value OTHER, but cannot >>>> seem to see/figure out where that is used, or how to leverage that >>>> setting. I looked through the ServletContextImpl class but only see the >>>> SessionTrackingMode of COOKIE, SSL and URL available. >>>> >>>> Any help/insight would be greatly appreciated. >>>> >>>> Thanks, >>>> >>>> Eric >>>> >>>> >>>> On Tue, Mar 28, 2017 at 7:57 PM, Stuart Douglas <sdouglas(a)redhat.com> >>>> wrote: >>>> >>>>> Why do you need a custom SessionConfig? In general Servlet will use >>>>> its own SessionConfig that matches the configuration of the deployed >>>>> application (generally just using a JSESSIONID cookie, unless it has >>>>> been customized). >>>>> >>>>> Stuart >>>>> >>>>> On Tue, Mar 28, 2017 at 2:19 PM, Eric B <ebenzacar(a)gmail.com> wrote: >>>>> > I've been trying to figure out how to build my own custom >>>>> SessionManager to >>>>> > push my sessions into Redis with a custom SessionConfig >>>>> implementation, but >>>>> > am having trouble finding any documentation to that extent. >>>>> > >>>>> > For the SesisonManager, I've read that I need to: >>>>> > >>>>> > Develop SessionManager which implements >>>>> > io.undertow.server.session.SessionManager >>>>> > Develop SessionManagerFactory which implements >>>>> > io.undertow.servlet.api.SessionManagerFactory >>>>> > Develop startup extension which implements >>>>> > io.undertow.servlet.ServletExtension, and in >>>>> handleDeployment(Deployment) >>>>> > method change sessionManagerFactory with new SessionManagerFactory. >>>>> > Register new ServletExtension by adding >>>>> > ../META-INF/services/io.undertow.servlet.ServletExtension file >>>>> (file should >>>>> > contain the name of new ServletExtension. for example >>>>> > com.my.utils.StartupExtension) >>>>> > >>>>> > >>>>> > But I can't seem to find anything that indicates how to provide my >>>>> own >>>>> > SessionConfig implementation. How do I register a custom >>>>> SessionConfig >>>>> > implementation? Is there any documentation to that extent? >>>>> > >>>>> > Are there any examples that can show me how to create my own >>>>> SessionManager >>>>> > and SessionConfig object? >>>>> > >>>>> > Thanks, >>>>> > >>>>> > Eric >>>>> > >>>>> > _______________________________________________ >>>>> > undertow-dev mailing list >>>>> > undertow-dev(a)lists.jboss.org >>>>> > https://lists.jboss.org/mailman/listinfo/undertow-dev >>>>> >>>> >>>> >>>> _______________________________________________ >>>> undertow-dev mailing list >>>> undertow-dev(a)lists.jboss.org >>>> https://lists.jboss.org/mailman/listinfo/undertow-dev >>>> >>> >>> >>> >>> _______________________________________________ >>> undertow-dev mailing list >>> undertow-dev(a)lists.jboss.org >>> https://lists.jboss.org/mailman/listinfo/undertow-dev >>> >> >>

7 years

4
9
0 / 0

Reverse proxy

by Geetha D R

Hi All, I want to reverse proxy a bunch of different internal applications using Undertow <http://undertow.io/>. For example my applications are: - https://secure.stage.org/application1/index.jsp - https://cee.stage.org/application2/default.aspx Every request to these applications should go through the proxy server - The proxy server in turn sets the authentication token on these requests and fulfils the request, the response is sent back to the client browser without exposing the authentication token to the client browser i.e., the single sign on cookie is not sent to the browser. When I setup my proxy to say localhost:7001 and try to hit any of the applications for example https://cee.stage.org/application2/default.aspx - this request should go through proxy server and the proxy is responsible to inject to single sign on cookie and request the target application - proxy sends back the response from the target app. I am not sure how to implement this in undertow? Can you please provide your suggestions -- Thanks Geetha DR

7 years

2
3
0 / 0

Howto create/configure a custom SessionManager and SessionConfig implementation?

by Eric B

I've been trying to figure out how to build my own custom SessionManager to push my sessions into Redis with a custom SessionConfig implementation, but am having trouble finding any documentation to that extent. For the SesisonManager, I've read that I need to: 1. Develop SessionManager which implements io.undertow.server.session.Ses sionManager 2. Develop SessionManagerFactory which implements io.undertow.servlet.api.SessionManagerFactory 3. Develop startup extension which implements io.undertow.servlet.ServletExtension, and in handleDeployment(Deployment) method change sessionManagerFactory with new SessionManagerFactory. 4. Register new ServletExtension by adding ../META-INF/services/io.undertow.servlet.ServletExtension file (file should contain the name of new ServletExtension. for example com.my.utils.StartupExtension) But I can't seem to find anything that indicates how to provide my own SessionConfig implementation. How do I register a custom SessionConfig implementation? Is there any documentation to that extent? Are there any examples that can show me how to create my own SessionManager and SessionConfig object? Thanks, Eric

7 years

4
7
0 / 0

Enable HTTP/2 and get JDK9 ALPN not supported

by Steve Hu

Hi, I searched this mailing list and one post mentioned that I don't need to use -Xbootclasspath/p:<path_to_alpn_boot_jar> after 1.4.0Final. I am trying HTTP/2 on my server with 1.4.10 and Oracle JDK 1.8 but when I start the server I got the following error. Do I have to use OpenJDK 8? If I switch to JBoss OpenSSL implementation? Thanks, Steve 21:00:36.468 [main] DEBUG io.undertow - Configuring listener with protocol HTTPS for interface 0.0.0.0 and port 8843 21:00:36.486 [main] DEBUG io.undertow - JDK9 ALPN not supported java.lang.NoSuchMethodException: javax.net.ssl.SSLParameters.setApplicationProtocols([Ljava.lang.String;) at java.lang.Class.getMethod(Class.java:1786) at io.undertow.protocols.alpn.JDK9AlpnProvider$1.run(JDK9AlpnProvider.java:47) at io.undertow.protocols.alpn.JDK9AlpnProvider$1.run(JDK9AlpnProvider.java:43) at java.security.AccessController.doPrivileged(Native Method) at io.undertow.protocols.alpn.JDK9AlpnProvider.<clinit>(JDK9AlpnProvider.java:43) at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) at java.lang.reflect.Constructor.newInstance(Constructor.java:423) at java.lang.Class.newInstance(Class.java:442) at java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:380) at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404) at java.util.ServiceLoader$1.next(ServiceLoader.java:480) at io.undertow.protocols.alpn.ALPNManager.<init>(ALPNManager.java:40) at io.undertow.protocols.alpn.ALPNManager.<clinit>(ALPNManager.java:35) at io.undertow.server.protocol.http.AlpnOpenListener.<init>(AlpnOpenListener.java:67) at io.undertow.server.protocol.http.AlpnOpenListener.<init>(AlpnOpenListener.java:90) at io.undertow.Undertow.start(Undertow.java:179) at com.networknt.server.Server.start(Server.java:170) at com.networknt.server.Server.main(Server.java:90) 21:00:36.503 [main] INFO com.networknt.server.Server - Https Server started on ip:0.0.0.0 Port:8843

7 years

2
14
0 / 0

Undertow jboss logging redirect to logback log file and console

by Steve Hu

Hi, Undertow is using jboss logger to log errors and my application is using slf4j/logback with logback.xml config file in the classpath with Undertow core http server embedded. I handles most exceptions in my own handlers but sometimes uncaught exceptions reaches Connectors class - executeRootHandler method which logs the error and return 500 response code. My first question: Is there a way to redirect the logs from Undertow to logback logs and controlled by logback.xml? I've found some discussions about replacing logger in WildFly but I am using embedded Undertow core only. Second question: When Connectors.executeRootHandler will be called? Is it called when you have the following line in your handler? if (exchange.isInIoThread()) { exchange.dispatch(this); return; } Is there any way we can by pass this so that I can handle uncaught exceptions in my ExceptionHandler in the handler chain? Thanks, Steve

7 years

6
13
0 / 0

Notifications from proxy

by jim-undertow＠spudsoft.co.uk

Hi, I'm trying to use embedded Undertow as a proxy in front of some REST services. I can get it all working, but I'm not getting enough information from the proxy, specifically I'd like some way to know: * When the proxy client tries to connect to an internal endpoint. * When the proxy client fails to connect to an internal endpoint. * The details (definitely headers, but possibly also body) going to the internal endpoint. * The details (definitely headers, but possibly also body) coming from the internal endpoint. At the moment I can't see any easily hookable way to get notifications about these things. I've copied and hacked the LoadBalancingProxyClient so I can add hooks to discover the internal endpoints and failures, but it looks like I'd have to duplicate quite a bit more to get hold of the details of the messages going to/from the internal endpoint. Have I missed anything? Is there a nice hook that will give me access to the exchange at these points? Thanks Jim

7 years

2
1
0 / 0

Does record-request-start-time really impact performance?

by Matt Solnit

Hi everyone. I'd like to add request duration to our HTTP access log, and found the "record-request-start-time" setting in the documentation. The documentation says "This has a small but measurable performance impact." But is that really true? From what I can see in the code, all it's doing is calling System.nanoTime(). Chasing this led me to a lot of Google searching on nanoTime() itself, and its performance. There's a lot of out-dated information out there, especially with regard to Linux. From what I can see in the Java source, it's using clock_gettime(CLOCK_MONOTONIC), and various sources say this is plenty fast: https://upvoid.com/devblog/2014/05/linux-timers/ (note: this site has an expired certificate as of 2/20, so you'll get a browser complaint) http://stackoverflow.com/questions/38779763/linux-times-or-clock-gettimec... Has anyone measured this at the Undertow level, to see whether "record-request-start-time" really affects performance? -- Matt

7 years, 1 month

2
1
0 / 0

Same-Site Cookie Attribute

by Sven Kubiak

I have looked at the current Cookie Implementation in Undetow, and it seems like there is no support for the Same-Site Cookie Attribute. See: https://scotthelme.co.uk/csrf-is-dead/ I'll be happy to create a pull request, if someone could point me to the right classes (and test cases) where the response headers for the cookies are being set. Best regards, Sven

7 years, 1 month

3
2
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

undertow-dev March 2017