users@jersey.java.net

Re: [Jersey] Jersey security + UriResolver

From: Paul Sandoz <Paul.Sandoz_at_Sun.COM>
Date: Thu, 24 Jul 2008 11:00:25 +0200

Hi Patrick,

This is a good place to post, the NetBeans guys responsible for
developing of the generated code are listening in and will hopefully
reply to you soon.

Paul.

Patrick Julien wrote:
> Not sure where to post this since this involves some code automatically
> generated by NetBeans. I have created some rest services using the
> wizard and some entity classes.
>
> The problem I am having is that the generated UriResolver makes a new
> http connection to resolve any references that are made in a post. If
> it so happens those services are protected by the container, this is a
> new http connection and so will get rejected by the container.
>
> There are at least 2 bugs here:
>
> 1. UriResolver has no idea how to forward any security tokens made by
> the original requester
> 2. The real http status code is thrown away in favor of a generic not
> found error (404) message. In this case, the error was a 401 (auth denied).
>
> --
> http://www.spectrumdt.com
> http://codepimps.org

-- 
| ? + ? = To question
----------------\
    Paul Sandoz
         x38109
+33-4-76188109