You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by Sergey Beryozkin <sb...@gmail.com> on 2013/07/26 12:07:12 UTC
Re: redirect with relative Location
On 18/04/13 17:46, onranoord wrote:
> yeah. succes. i implemented a customtransportfactory that instantiates a
> customhttpconduit.
> by overriding the aforementioned method the redirect succeeds.
>
>
FYI, in CXF 2.7.7-SNAPSHOT you can configure HTTPConduit to auto-follow
redirects (this property has always been supported) and then add a
"http.redirect.relative.uri" contextual property, and that will do it
for you, and then this can further be secured by validating that we
still get the same host redirection (we don't use URL resolve function
so virtually no chance to somehow produce a diff host URL from a rel
redirect) by setting a "http.redirect.same.host.only" property - the
latter should probably be set to true in most auto-redirect cases...
Cheers, Sergey
>
> --
> View this message in context: http://cxf.547215.n5.nabble.com/redirect-with-relative-Location-tp5726345p5726508.html
> Sent from the cxf-user mailing list archive at Nabble.com.
>
Re: AW: redirect with relative Location
Posted by Sergey Beryozkin <sb...@gmail.com>.
On 29/07/13 08:18, Mitchell, Jermaine wrote:
> Many thanks for your reply Sergey!!
>
> But could you please give us an example how this must be configured in cxf.xml according to the WSDiscoveryServiceImpl (SoapEnvelope, XAddrs)!?
>
The contextual properties can be set on a per-client basis, example, in
WS-Discovery case, they would be set in jaxws:client/jaxws:properties,
or in cxf.xml, inside cxf:bus/properties, that should do it
Cheers, Sergey
> Thanks again
>
> -----Ursprüngliche Nachricht-----
> Von: Sergey Beryozkin [mailto:sberyozkin@gmail.com]
> Gesendet: Freitag, 26. Juli 2013 12:07
> An: users@cxf.apache.org
> Betreff: Re: redirect with relative Location
>
> On 18/04/13 17:46, onranoord wrote:
>> yeah. succes. i implemented a customtransportfactory that instantiates
>> a customhttpconduit.
>> by overriding the aforementioned method the redirect succeeds.
>>
>>
> FYI, in CXF 2.7.7-SNAPSHOT you can configure HTTPConduit to auto-follow redirects (this property has always been supported) and then add a "http.redirect.relative.uri" contextual property, and that will do it for you, and then this can further be secured by validating that we still get the same host redirection (we don't use URL resolve function so virtually no chance to somehow produce a diff host URL from a rel
> redirect) by setting a "http.redirect.same.host.only" property - the latter should probably be set to true in most auto-redirect cases...
>
> Cheers, Sergey
>>
>> --
>> View this message in context:
>> http://cxf.547215.n5.nabble.com/redirect-with-relative-Location-tp5726
>> 345p5726508.html Sent from the cxf-user mailing list archive at
>> Nabble.com.
>>
>
AW: redirect with relative Location
Posted by "Mitchell, Jermaine" <Je...@tia.com>.
Many thanks for your reply Sergey!!
But could you please give us an example how this must be configured in cxf.xml according to the WSDiscoveryServiceImpl (SoapEnvelope, XAddrs)!?
Thanks again
-----Ursprüngliche Nachricht-----
Von: Sergey Beryozkin [mailto:sberyozkin@gmail.com]
Gesendet: Freitag, 26. Juli 2013 12:07
An: users@cxf.apache.org
Betreff: Re: redirect with relative Location
On 18/04/13 17:46, onranoord wrote:
> yeah. succes. i implemented a customtransportfactory that instantiates
> a customhttpconduit.
> by overriding the aforementioned method the redirect succeeds.
>
>
FYI, in CXF 2.7.7-SNAPSHOT you can configure HTTPConduit to auto-follow redirects (this property has always been supported) and then add a "http.redirect.relative.uri" contextual property, and that will do it for you, and then this can further be secured by validating that we still get the same host redirection (we don't use URL resolve function so virtually no chance to somehow produce a diff host URL from a rel
redirect) by setting a "http.redirect.same.host.only" property - the latter should probably be set to true in most auto-redirect cases...
Cheers, Sergey
>
> --
> View this message in context:
> http://cxf.547215.n5.nabble.com/redirect-with-relative-Location-tp5726
> 345p5726508.html Sent from the cxf-user mailing list archive at
> Nabble.com.
>