axis-java-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From axis-...@ws.apache.org
Subject [jira] Commented: (AXIS-1386) Service access through baseUrl possible although a special endpointUrl is defined
Date Thu, 07 Oct 2004 12:09:51 GMT
The following comment has been added to this issue:

     Author: Jayachandra Sekhara Rao Sunkara
    Created: Thu, 7 Oct 2004 5:07 AM
       Body:
The servlet engine basically hands over execution to AxisServlet if the requestURI url-pattern
matches with any one of those registered in web.xml . From then onwards, AxisServlet is just
bothering about the queryString (if present) and the serviceName, and is really not takin
care of location where the service is deployed. Because of this, every service is accessible
from every registered url-pattern of web.xml

I was able to write a patch that would block disclosing a service which is deployed using
special <endpointURL> with the normal baseURL ("/services/") prefix. But services that
are not deployed using <endpointURL> tag initially, continue to be accessible from every
registered url-pattern of web.xml . Shouldn't there be some default enpointURL configured
if service deployment lacks <endpointURL> tag? otherwise resolving this issue appears
to be very cumbersome (too much of patchy code in AxisServlet.java that hinders readability).
To overcome that, a design decision of what should be the default endpointURL at which services
should be deployed must be made. And while configuring engine for every service its endpointURL
must be filled in (either with what user explicitly mentioned, or with the default one) rather
than leaving it as null. I just wanted to post this observation and look forward for comments.

Meanwhile I'd clean up and post the patch I was able to write that would resolve part of the
issue.
---------------------------------------------------------------------
View this comment:
  http://issues.apache.org/jira/browse/AXIS-1386?page=comments#action_53804

---------------------------------------------------------------------
View the issue:
  http://issues.apache.org/jira/browse/AXIS-1386

Here is an overview of the issue:
---------------------------------------------------------------------
        Key: AXIS-1386
    Summary: Service access through baseUrl possible although a special endpointUrl is defined
       Type: Bug

     Status: Unassigned
   Priority: Major

    Project: Axis
 Components: 
             Basic Architecture
   Versions:
             1.2 Beta

   Assignee: 
   Reporter: Peter MH

    Created: Wed, 9 Jun 2004 2:57 AM
    Updated: Thu, 7 Oct 2004 5:07 AM
Environment: java full version "1.4.1_05-b01", Tomcat 5.0.25

Description:
I have a service deployed using the <endpointUrl> Tag to use a different URL (/axis/protected)
to the standard Axis baseUrl (/axis/services). To get this working I added the following servlet
mapping to the web.xml
<servlet-mapping>
   <servlet-name>AxisServlet</servlet-name>
   <url-pattern>/protected/*</url-pattern>
</servlet-mapping>
Now I can access the service on both URLs.
I asumed that Axis will analyze the endpointUrl tag and provide this service only at this
url.



---------------------------------------------------------------------
JIRA INFORMATION:
This message is automatically generated by JIRA.

If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa

If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira


Mime
View raw message