users@jersey.java.net

Jersey security + UriResolver

From: Patrick Julien <pjulien_at_gmail.com>
Date: Wed, 23 Jul 2008 17:32:11 -0400

Not sure where to post this since this involves some code automatically
generated by NetBeans. I have created some rest services using the wizard
and some entity classes.

The problem I am having is that the generated UriResolver makes a new http
connection to resolve any references that are made in a post. If it so
happens those services are protected by the container, this is a new http
connection and so will get rejected by the container.

There are at least 2 bugs here:

1. UriResolver has no idea how to forward any security tokens made by the
original requester
2. The real http status code is thrown away in favor of a generic not found
error (404) message. In this case, the error was a 401 (auth denied).

-- 
http://www.spectrumdt.com
http://codepimps.org