Re: How is the shiro-jaxrs magic supposed to work with JAX-RS in the OSGi web whiteboard?
Ok,
I am glad it worked out.
> On Feb 8, 2024, at 1:50 PM, Steinar Bang wrote:
>
>> Steinar Bang :
>
>> I'm using an OSGi Web Whiteboard component
>> https://github.com/steinarb/oldalbum/blob/e8dbf374c6132694f0ad7c0d4026def355d5514e/oldalbum.web.api/src/main/java/no/priv/bang/oldalbum/web/api/OldAlbumWebApiServlet.java#L33
>
>> that derives from JerseyServlet, which is written by me:
>> https://github.com/steinarb/servlet/blob/9cce8e033e63a23585ddb868e5af5ec2a1ba9be0/servlet/servlet.jersey/src/main/java/no/priv/bang/servlet/jersey/JerseyServlet.java#L48
>
>> which in turn derives from the Jersey ServletContainer class, and in the
>> init() method adds injected OSGi services to the HK2 dependency
>> injection container, so that they can be injected into JAX-RS resource
>> classes:
>> https://github.com/steinarb/servlet/blob/9cce8e033e63a23585ddb868e5af5ec2a1ba9be0/servlet/servlet.jersey/src/main/java/no/priv/bang/servlet/jersey/JerseyServlet.java#L85
>
>> I have written this myself and figured I had a pretty good handle on how
>> stuff is handled, but the JAX-RS Application and the
>> Application.getClasses() methods are new to me.
>
> Ok, I've got it working by adding the following method to
> OldAlbumWebApiServlet:
> @Override
> protected void init(WebConfig webConfig) throws ServletException {
> super.init(webConfig);
> var copyOfExistingConfig = new ResourceConfig(getConfiguration());
> copyOfExistingConfig.register(ShiroFeature.class);
> reload(copyOfExistingConfig);
> }
>
> The org.glassfish.jersey.server.ResourceConfig class extends the
> javax.ws.rs.core.Application class.
>
> After this I got 401 from the Rest API endpoint after clearing cookies,
> and 200 OK when logged in.
>
> I'll summarize with a new post on the 2 year old thread "Shiro: possible
> to configure part of the unauthenticated URLs to return 401 instead
> 302?" when I've finished.
>
Re: How is the shiro-jaxrs magic supposed to work with JAX-RS in the OSGi web whiteboard?
> Steinar Bang :
> I'm using an OSGi Web Whiteboard component
>
> https://github.com/steinarb/oldalbum/blob/e8dbf374c6132694f0ad7c0d4026def355d5514e/oldalbum.web.api/src/main/java/no/priv/bang/oldalbum/web/api/OldAlbumWebApiServlet.java#L33
> that derives from JerseyServlet, which is written by me:
>
> https://github.com/steinarb/servlet/blob/9cce8e033e63a23585ddb868e5af5ec2a1ba9be0/servlet/servlet.jersey/src/main/java/no/priv/bang/servlet/jersey/JerseyServlet.java#L48
> which in turn derives from the Jersey ServletContainer class, and in the
> init() method adds injected OSGi services to the HK2 dependency
> injection container, so that they can be injected into JAX-RS resource
> classes:
>
> https://github.com/steinarb/servlet/blob/9cce8e033e63a23585ddb868e5af5ec2a1ba9be0/servlet/servlet.jersey/src/main/java/no/priv/bang/servlet/jersey/JerseyServlet.java#L85
> I have written this myself and figured I had a pretty good handle on how
> stuff is handled, but the JAX-RS Application and the
> Application.getClasses() methods are new to me.
Ok, I've got it working by adding the following method to OldAlbumWebApiServlet:
@Override
protected void init(WebConfig webConfig) throws ServletException {
super.init(webConfig);
var copyOfExistingConfig = new ResourceConfig(getConfiguration());
copyOfExistingConfig.register(ShiroFeature.class);
reload(copyOfExistingConfig);
}
The org.glassfish.jersey.server.ResourceConfig class extends the
javax.ws.rs.core.Application class.
After this I got 401 from the Rest API endpoint after clearing cookies,
and 200 OK when logged in.
I'll summarize with a new post on the 2 year old thread "Shiro: possible
to configure part of the unauthenticated URLs to return 401 instead
302?" when I've finished.
Re: How is the shiro-jaxrs magic supposed to work with JAX-RS in the OSGi web whiteboard?
> lenny-5o6p1tln9c5dpfhejli...@public.gmane.org: > Hi, > The magic is explained in the documentation towards the bottom, but I think > you already know that: > // register the Shiro Feature > classes.add(ShiroFeature.class); Yes. But that doesn't help me much. I'm using an OSGi Web Whiteboard component https://github.com/steinarb/oldalbum/blob/e8dbf374c6132694f0ad7c0d4026def355d5514e/oldalbum.web.api/src/main/java/no/priv/bang/oldalbum/web/api/OldAlbumWebApiServlet.java#L33 that derives from JerseyServlet, which is written by me: https://github.com/steinarb/servlet/blob/9cce8e033e63a23585ddb868e5af5ec2a1ba9be0/servlet/servlet.jersey/src/main/java/no/priv/bang/servlet/jersey/JerseyServlet.java#L48 which in turn derives from the Jersey ServletContainer class, and in the init() method adds injected OSGi services to the HK2 dependency injection container, so that they can be injected into JAX-RS resource classes: https://github.com/steinarb/servlet/blob/9cce8e033e63a23585ddb868e5af5ec2a1ba9be0/servlet/servlet.jersey/src/main/java/no/priv/bang/servlet/jersey/JerseyServlet.java#L85 I have written this myself and figured I had a pretty good handle on how stuff is handled, but the JAX-RS Application and the Application.getClasses() methods are new to me. > This hooks up into Jax-RS Provider mechanism, and that’s what scans > the annotations. I believe it’s supposed to work transparently with > Karaf and OSGi, but I am not an expert in those. Hm... the Application has no role that I can see if one uses the Web Whiteboard...? Or does it? (Note that my self-written JerseyServlet predates the OSGi JAX-RS Whiteboard specification, or at least: predates the OSGi JAX-RS Whiteboard implementation in karaf, and I've never felt the urge to move there, because I currently control what jersey version I'm using and what jackson version I'm using, and those are newer than the ones currently shipped with karaf. So even if karaf itself supports shiro-jaxrs I won't be able to use it. But if I can figure out where and how it supports it, I may be able to repeat it)
