Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [ee4j-community] JAX-RS Now Available in Git

Hi,

Indeed, JAX-RS is pretty stable. There's a few gaps in how security works in a standard way without any explicit (or even implicit) dependency on Servlet, so that would be a good thing to address. These gaps become painfully obvious in the MicroProfile project, where an ad-hoc mechanism had to be invented on the spot (the not really ideal @LoginConfig annotation) to setup security.

There's also some security "backbone" missing, making it hard to answer security queries like: "to which JAX-RS methods (endpoints) does the current caller have access".

Kind regards,
Arjan Tijms




On Sat, Jan 20, 2018 at 12:52 PM, reza_rahman <reza_rahman@xxxxxxxxx> wrote:
+1. This is what I had in mind for JAX-RS too. In addition, JAX-RS needs to support Java SE 9 modules and possibly reactive streams.

Other than this, I think JAX-RS is pretty much stable. I really think a "minor player" like someone from the community or the CXF folks could take over JAX-RS now (hint, hint :-)). This will allow the "big guys" to focus on where the heavy lifting is necessary.

Sent via the Samsung Galaxy S7, an AT&T 4G LTE smartphone

-------- Original message --------
From: arjan tijms <arjan.tijms@xxxxxxxxx>
Date: 1/19/18 5:41 PM (GMT-05:00)
To: EE4J community discussions <ee4j-community@xxxxxxxxxxx>
Subject: Re: [ee4j-community] JAX-RS Now Available in Git

Super news! :)

I hope we can start work on evolving the API soon. 

My two initial proposals would be to further align with CDI and to define support for the existing javax.annotation.security.RolesAllowed annotation (several JAX-RS implementations already support that in a proprietary way, and MicroProfile JWT-AUTH defines this for JAX-RS as well).

Kind regards,
Arjan Tijms





On Fri, Jan 19, 2018 at 9:53 PM, dmitry.kornilov <dmitry.kornilov@xxxxxxxxxx> wrote:
Great job, Santiago! Thank you very much!

-- Dmitry

Отправлено со смартфона Samsung Galaxy.

-------- Исходное сообщение --------
От: Santiago Pericas-Geertsen <Santiago.PericasGeertsen@oracle.com>
Дата: 19.01.18 22:37 (GMT+01:00)
Тема: [ee4j-community] JAX-RS Now Available in Git

All,

 The JAX-RS API sources are now available at [1].

— Santiago


_______________________________________________
ee4j-community mailing list
ee4j-community@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/ee4j-community



_______________________________________________
ee4j-community mailing list
ee4j-community@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/ee4j-community



Back to the top