blocks|key|1891124|text|我不知道如何解决您的异常。然而，我可以向你推荐一种不同的方法来做同样的事情。我希望它能帮上忙。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1891125|我遇到过完全相同的问题:我需要在http头中添加额外的参数(顺便说一句，这也与身份验证有关)。此外，我需要在每个调用中发送它们，因为我想做一个“典型的”rest实现，而不需要维护会话。|1891126|我使用的是Jersey+2.7+--但我想说它应该可以在2.0中运行。我遵循了他们的文档https://jersey.java.net/documentation/2.0/filters-and-interceptors.html|offset|length|1891127|这是非常清楚的，但不管怎样，我在下面复制粘贴我的实现。它工作得很好。诚然，还有一些其他方法来保护rest服务，例如，这是一个很好的方法：http://www.objecthunter.net/tinybo/blog/articles/89|1891128|但它们取决于您使用的应用程序服务器实现和数据库。在我看来，过滤器更灵活，更容易实现。|1891129|复制-粘贴:我定义了一个用于身份验证的过滤器，它应用于每个调用，并在服务之前执行(感谢@PreMatching)。|style|CODE|1891130|@PreMatching
public+class+AuthenticationRequestFilter+implements+ContainerRequestFilter+{

++++@Override
++++public+void+filter(final+ContainerRequestContext+requestContext)+throws+IOException+{
++++++++final+MultivaluedMap<String,+String>+headers+=+requestContext.getHeaders();
++++++++if+(headers+==+null)+{
++++++++++++throw+new...
++++++++}

++++++++//+here+I+get+parameters+from+the+header,+via+headers.get("parameter_name")
++++++++//+In+particular,+I+get+the+profile,+which+I+plan+to+use+as+a+Jersey+role
++++++++//+then+I+authenticate
++++++++//+finally,+I+inform+the+Principal+and+the+role+in+the+SecurityContext+object,+so+that+I+can+use+@RolesAllowed+later
++++++++requestContext.setSecurityContext(new+SecurityContext()+{

++++++++++++@Override
++++++++++++public+boolean+isUserInRole(final+String+arg0)+{
++++++++++++++++//...
++++++++++++}

++++++++++++@Override
++++++++++++public+boolean+isSecure()+{
++++++++++++++++//...
++++++++++++}

++++++++++++@Override
++++++++++++public+Principal+getUserPrincipal()+{
++++++++++++++++//...
++++++++++++}

++++++++++++@Override
++++++++++++public+String+getAuthenticationScheme()+{
++++++++++++++++//...
++++++++++++}
++++++++});

++++}

}|code-block|syntax|javascript|1891131|您必须在ResourceConfig实现中包含此筛选器类，|1891132|public+class+MyResourceConfig+extends+ResourceConfig+{

++++public+MyResourceConfig()+{

++++++++//+my+init
++++++++//+my+packages
++++++++register(AuthenticationRequestFilter.class);+//+filtro+de+autenticación
++++++++//+other+register

++++}

}|1891133|希望它能帮上忙！|1891134|entityMap|0|LINK|mutability|MUTABLE|url|https://jersey.java.net/documentation/2.0/filters-and-interceptors.html|1|http://www.objecthunter.net/tinybo/blog/articles/89^0|0|0|18|1Z|0|0|1W|1F|1|0|0|17|C|0|0|4|E|0|0|0^^$0|@$1|2|3|4|5|6|7|1A|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1B|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|1C|8|@]|9|@$F|1D|G|1E|1|1F]]|A|$]]|$1|H|3|I|5|6|7|1G|8|@]|9|@$F|1H|G|1I|1|1J]]|A|$]]|$1|J|3|K|5|6|7|1K|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|1L|8|@$F|1M|G|1N|N|O]]|9|@]|A|$]]|$1|P|3|Q|5|R|7|1O|8|@]|9|@]|A|$S|T]]|$1|U|3|V|5|6|7|1P|8|@$F|1Q|G|1R|N|O]]|9|@]|A|$]]|$1|W|3|X|5|R|7|1S|8|@]|9|@]|A|$S|T]]|$1|Y|3|Z|5|6|7|1T|8|@]|9|@]|A|$]]|$1|10|3|-4|5|6|7|1U|8|@]|9|@]|A|$]]]|11|$12|$5|13|14|15|A|$16|17]]|18|$5|13|14|15|A|$16|19]]]]

I don't know how to resolve your exception. However, may I propose you a different way to do the same thing. I hope it helps.

I've faced exactly the same problem: I need extra parameters in the http header (btw, also related to authentication). Besides, I need to send them in every call, since I want to do a "typical" rest implementation, without maintaining a session.

I'm using Jersey 2.7 - but I'd say it should work in 2.0. I've followed their documentation
<a href="https://jersey.java.net/documentation/2.0/filters-and-interceptors.html" rel="nofollow">https://jersey.java.net/documentation/2.0/filters-and-interceptors.html</a>

It's quite clear there, but anyway I copy-paste my implementation below.
It works fine. True there are some other ways to secure a rest service, for example this is a good one:
<a href="http://www.objecthunter.net/tinybo/blog/articles/89" rel="nofollow">http://www.objecthunter.net/tinybo/blog/articles/89</a>

But they depend on the application server implementation and the database you use. The filter, in my opinion, is more flexible and easier to implement.

The copy-paste: I've defined a filter for authentication, which applies to every call and it is executed before the service (thanks to <code>@PreMatching</code>).

<pre><code>@PreMatching
public class AuthenticationRequestFilter implements ContainerRequestFilter {

 @Override
 public void filter(final ContainerRequestContext requestContext) throws IOException {
 final MultivaluedMap&lt;String, String&gt; headers = requestContext.getHeaders();
 if (headers == null) {
 throw new...
 }

 // here I get parameters from the header, via headers.get("parameter_name")
 // In particular, I get the profile, which I plan to use as a Jersey role
 // then I authenticate
 // finally, I inform the Principal and the role in the SecurityContext object, so that I can use @RolesAllowed later
 requestContext.setSecurityContext(new SecurityContext() {

 @Override
 public boolean isUserInRole(final String arg0) {
 //...
 }

 @Override
 public boolean isSecure() {
 //...
 }

 @Override
 public Principal getUserPrincipal() {
 //...
 }

 @Override
 public String getAuthenticationScheme() {
 //...
 }
 });

 }

}
</code></pre>

You have to include this filter class in your implementation of <code>ResourceConfig</code>,

<pre><code>public class MyResourceConfig extends ResourceConfig {

 public MyResourceConfig() {

 // my init
 // my packages
 register(AuthenticationRequestFilter.class); // filtro de autenticación
 // other register

 }

}
</code></pre>

Hope it helps!

blocks|key|1891136|text|如果您想要的只是将值直接从头部传递到方法，则不需要创建自定义注释。假设你有一个头Authorization，然后你可以像这样声明你的方法来很容易地访问它：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1891137|@GET
public+String+authFromHeader(@HeaderParam("Authorization")+String+authorization)+{
++++return+"Header+Value:+"+%2B+authorization+%2B+"\n";
}|code-block|syntax|javascript|1891138|你可以通过调用curl来测试它，例如|1891139|$+curl+--header+"Authorization:+1234"+http://localhost:8080/rest/resource
Header+Value:+1234|1891140|根据您问题的答案，如何创建自定义绑定如下所示。|1891141|首先你必须像这样声明你的注解：|1891142|@java.lang.annotation.Target(PARAMETER)
@java.lang.annotation.Retention(RUNTIME)
@java.lang.annotation.Documented
public+@interface+UserAuthHeaderParam+{
}|1891143|声明了注解之后，您必须定义如何解析它。声明Value+Factory提供程序(这是您可以访问头参数的地方-请参阅我的注释)：|1891144|@Singleton
public+class+UserAuthHeaderParamValueFactoryProvider+extends+AbstractValueFactoryProvider+{

++++@Inject
++++protected+UserAuthHeaderParamValueFactoryProvider(MultivaluedParameterExtractorProvider+mpep,+ServiceLocator+locator)+{
++++++++super(mpep,+locator,+Parameter.Source.UNKNOWN);
++++}

++++@Override
++++protected+Factory<?>+createValueFactory(Parameter+parameter)+{
++++++++Class<?>+classType+=+parameter.getRawType();

++++++++if+(classType+==+null+%7C%7C+(!classType.equals(String.class)))+{
++++++++++++return+null;
++++++++}

++++++++return+new+AbstractHttpContextValueFactory<String>()+{
++++++++++++@Override
++++++++++++protected+String+get(HttpContext+httpContext)+{
++++++++++++++++//+you+can+get+the+header+value+here
++++++++++++++++return+"testString";
++++++++++++}
++++++++};
++++}
}|1891145|现在声明一个注入解析器|1891146|public+class+UserAuthHeaderParamResolver+extends+ParamInjectionResolver<UserAuthHeaderParam>+{
++++public+UserAuthHeaderParamResolver()+{
++++++++super(UserAuthHeaderParamValueFactoryProvider.class);
++++}
}|1891147|和用于您的配置的绑定器|1891148|public+class+HeaderParamResolverBinder+extends+AbstractBinder+{

++++@Override
++++protected+void+configure()+{
++++++++bind(UserAuthHeaderParamValueFactoryProvider.class)
++++++++++++++++.to(ValueFactoryProvider.class)
++++++++++++++++.in(Singleton.class);

++++++++bind(UserAuthHeaderParamResolver.class)
++++++++++++++++.to(new+TypeLiteral<InjectionResolver<UserAuthHeaderParam>>()+{})
++++++++++++++++.in(Singleton.class);
++++}
}|1891149|现在最后一件事，在你的ResourceConfig中添加register(new+HeaderParamResolverBinder())，像这样|1891150|@ApplicationPath("rest")
public+class+MyApplication+extends+ResourceConfig+{
++++public+MyApplication()+{
++++++++register(new+HeaderParamResolverBinder());
++++++++packages("your.packages");
++++}
}|1891151|考虑到这一点，您现在应该能够根据需要使用该值：|1891152|@GET
public+String+getResult(@UserAuthHeaderParam+String+param)+{
++++return+"RESULT:+"+%2B+param;
}|1891153|我希望这能帮到你。|1891154|entityMap^0|14|D|0|0|7|4|0|0|0|0|0|0|0|0|0|0|0|S|15|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1I|8|@$9|1J|A|1K|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|1L|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|1M|8|@$9|1N|A|1O|B|C]]|D|@]|E|$]]|$1|M|3|N|5|H|7|1P|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|1Q|8|@]|D|@]|E|$]]|$1|Q|3|R|5|6|7|1R|8|@]|D|@]|E|$]]|$1|S|3|T|5|H|7|1S|8|@]|D|@]|E|$I|J]]|$1|U|3|V|5|6|7|1T|8|@]|D|@]|E|$]]|$1|W|3|X|5|H|7|1U|8|@]|D|@]|E|$I|J]]|$1|Y|3|Z|5|6|7|1V|8|@]|D|@]|E|$]]|$1|10|3|11|5|H|7|1W|8|@]|D|@]|E|$I|J]]|$1|12|3|13|5|6|7|1X|8|@]|D|@]|E|$]]|$1|14|3|15|5|H|7|1Y|8|@]|D|@]|E|$I|J]]|$1|16|3|17|5|6|7|1Z|8|@$9|20|A|21|B|C]]|D|@]|E|$]]|$1|18|3|19|5|H|7|22|8|@]|D|@]|E|$I|J]]|$1|1A|3|1B|5|6|7|23|8|@]|D|@]|E|$]]|$1|1C|3|1D|5|H|7|24|8|@]|D|@]|E|$I|J]]|$1|1E|3|1F|5|6|7|25|8|@]|D|@]|E|$]]|$1|1G|3|-4|5|6|7|26|8|@]|D|@]|E|$]]]|1H|$]]

If all you want is to pass value directly from the header to the method you don't need to create custom annotations. Let's say you have a header <code>Authorization</code>, then you can easily access it by declaring your method like this:

<pre><code>@GET
public String authFromHeader(@HeaderParam("Authorization") String authorization) {
 return "Header Value: " + authorization + "\n";
}
</code></pre>

You can test it by calling <code>curl</code>, e.g.

<pre><code>$ curl --header "Authorization: 1234" http://localhost:8080/rest/resource
Header Value: 1234
</code></pre>

Given that the answer to your question, how to create custom binding is as follows.

First you have to declare your annotation like this:

<pre><code>@java.lang.annotation.Target(PARAMETER)
@java.lang.annotation.Retention(RUNTIME)
@java.lang.annotation.Documented
public @interface UserAuthHeaderParam {
}
</code></pre>

Having your annotation declared you have to define how it will be resolved. Declare the Value Factory Provider (this is where you'll have access to the header parameters - see my comment):

<pre><code>@Singleton
public class UserAuthHeaderParamValueFactoryProvider extends AbstractValueFactoryProvider {

 @Inject
 protected UserAuthHeaderParamValueFactoryProvider(MultivaluedParameterExtractorProvider mpep, ServiceLocator locator) {
 super(mpep, locator, Parameter.Source.UNKNOWN);
 }

 @Override
 protected Factory&lt;?&gt; createValueFactory(Parameter parameter) {
 Class&lt;?&gt; classType = parameter.getRawType();

 if (classType == null || (!classType.equals(String.class))) {
 return null;
 }

 return new AbstractHttpContextValueFactory&lt;String&gt;() {
 @Override
 protected String get(HttpContext httpContext) {
 // you can get the header value here
 return "testString";
 }
 };
 }
}
</code></pre>

Now declare an injection resolver

<pre><code>public class UserAuthHeaderParamResolver extends ParamInjectionResolver&lt;UserAuthHeaderParam&gt; {
 public UserAuthHeaderParamResolver() {
 super(UserAuthHeaderParamValueFactoryProvider.class);
 }
}
</code></pre>

and a Binder for your configuration

<pre><code>public class HeaderParamResolverBinder extends AbstractBinder {

 @Override
 protected void configure() {
 bind(UserAuthHeaderParamValueFactoryProvider.class)
 .to(ValueFactoryProvider.class)
 .in(Singleton.class);

 bind(UserAuthHeaderParamResolver.class)
 .to(new TypeLiteral&lt;InjectionResolver&lt;UserAuthHeaderParam&gt;&gt;() {})
 .in(Singleton.class);
 }
}
</code></pre>

now the last thing, in your ResourceConfig add <code>register(new HeaderParamResolverBinder())</code>, like this

<pre><code>@ApplicationPath("rest")
public class MyApplication extends ResourceConfig {
 public MyApplication() {
 register(new HeaderParamResolverBinder());
 packages("your.packages");
 }
}
</code></pre>

Given that, you should be now able to use the value as you wanted:

<pre><code>@GET
public String getResult(@UserAuthHeaderParam String param) {
 return "RESULT: " + param;
}
</code></pre>

I hope this helps.

blocks|key|1677298|text|如果您需要检索绑定到一个对象中的所有http头，一种解决方案可以是使用@Context注释来获取javax.ws.rs.core.HttpHeaders；，它包含所有请求头的列表。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1677299|@POST
@Path("/user/{userId}/orders")
@Produces(MediaType.APPLICATION_JSON)
@Consumes(MediaType.APPLICATION_JSON)
public+MyResult+foo(@PathParam("userId")+String+someString,+@Context+HttpHeaders+headers){
+//+You+can+list+all+available+HTTP+request+headers+via+following+code+:
+++for(String+header+:+headers.getRequestHeaders().keySet()){
+++++System.out.println(header);
+++}
}|code-block|syntax|javascript|1677300|entityMap^0|Z|8|1C|S|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]|$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|R|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|S|8|@]|D|@]|E|$]]]|L|$]]

If your need is to retrieve all the http headers binding into one object, a solution could be to use the <code>@Context</code> annotation to get <code>javax.ws.rs.core.HttpHeaders</code>; which contains the list of all request headers.

<pre><code>@POST
@Path("/user/{userId}/orders")
@Produces(MediaType.APPLICATION_JSON)
@Consumes(MediaType.APPLICATION_JSON)
public MyResult foo(@PathParam("userId") String someString, @Context HttpHeaders headers){
 // You can list all available HTTP request headers via following code :
 for(String header : headers.getRequestHeaders().keySet()){
 System.out.println(header);
 }
}
</code></pre>

blocks|key|1891170|text|下面是我的UserAuthHeaderParamValueFactoryProvider类的实际实现|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1891171|import+javax.inject.Inject;
import+javax.inject.Singleton;

import+org.glassfish.hk2.api.Factory;
import+org.glassfish.hk2.api.ServiceLocator;
import+org.glassfish.jersey.server.internal.inject.AbstractContainerRequestValueFactory;
import+org.glassfish.jersey.server.internal.inject.AbstractValueFactoryProvider;
import+org.glassfish.jersey.server.internal.inject.MultivaluedParameterExtractorProvider;

++++import+org.glassfish.jersey.server.model.Parameter;

++++@Singleton
++++public+class+UserAuthHeaderParamValueFactoryProvider+extends+AbstractValueFactoryProvider+{

++++++++@Inject
++++++++protected+UserAuthHeaderParamValueFactoryProvider(MultivaluedParameterExtractorProvider+mpep,+ServiceLocator+locator)+{
++++++++++++super(mpep,+locator,+Parameter.Source.UNKNOWN);
++++++++}

++++++++@Override
++++++++protected+Factory<?>+createValueFactory(Parameter+parameter)+{
++++++++++++Class<?>+classType+=+parameter.getRawType();

++++++++++++if+(classType+==+null+%7C%7C+(!classType.equals(String.class)))+{
++++++++++++++++return+null;
++++++++++++}

++++++++++++return+new+AbstractContainerRequestValueFactory<String>()+{
++++++++++++++++@Override
++++++++++++++++public+String+provide()+{
++++++++++++++++++++//you+can+use+get+any+header+value.
++++++++++++++++++++return+getContainerRequest().getHeaderString("Authorization");
++++++++++++++++}

++++++++++++};
++++++++}|code-block|syntax|javascript|1891172|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

here is my actual implementatipn of UserAuthHeaderParamValueFactoryProvider class

<pre><code>import javax.inject.Inject;
import javax.inject.Singleton;

import org.glassfish.hk2.api.Factory;
import org.glassfish.hk2.api.ServiceLocator;
import org.glassfish.jersey.server.internal.inject.AbstractContainerRequestValueFactory;
import org.glassfish.jersey.server.internal.inject.AbstractValueFactoryProvider;
import org.glassfish.jersey.server.internal.inject.MultivaluedParameterExtractorProvider;

 import org.glassfish.jersey.server.model.Parameter;

 @Singleton
 public class UserAuthHeaderParamValueFactoryProvider extends AbstractValueFactoryProvider {

 @Inject
 protected UserAuthHeaderParamValueFactoryProvider(MultivaluedParameterExtractorProvider mpep, ServiceLocator locator) {
 super(mpep, locator, Parameter.Source.UNKNOWN);
 }

 @Override
 protected Factory&lt;?&gt; createValueFactory(Parameter parameter) {
 Class&lt;?&gt; classType = parameter.getRawType();

 if (classType == null || (!classType.equals(String.class))) {
 return null;
 }

 return new AbstractContainerRequestValueFactory&lt;String&gt;() {
 @Override
 public String provide() {
 //you can use get any header value.
 return getContainerRequest().getHeaderString("Authorization");
 }

 };
 }
</code></pre>

I am trying to create a custom http param binding for my restful service. Please see the example below.

<pre><code>@POST
@Path("/user/{userId}/orders")
@Produces(MediaType.APPLICATION_JSON)
@Consumes(MediaType.APPLICATION_JSON)
public MyResult foo(@PathParam("userId") String someString, @UserAuthHeaderParam String authString){

}
</code></pre>

You can see that there is a UserAuthHeaderParam annotation in the function signature. What I want to do is have a custom http param binding other than the standard javax.ws.rs.*Param .

I have try to implement org.glassfish.hk2.api.InjectionResolver which basically extract the value from http header:

<pre><code>public class ProtoInjectionResolver implements InjectionResolver&lt;UserAuthHeaderParam&gt;{
...
@Override
public Object resolve(Injectee injectee, ServiceHandle&lt; ? &gt; root)
{

 return "Hello World";
}
...

}
</code></pre>

When I call the restful service, the server get below exceptions. It indicates that the framework fails to resolve the param in the function signature:

<pre><code>org.glassfish.hk2.api.UnsatisfiedDependencyException: There was no object available for injection at Injectee(requiredType=String,parent=MyResource,qualifiers={}),position=0,optional=false,self=false,unqualified=null,2136594195), 

java.lang.IllegalArgumentException: While attempting to resolve the dependencies of rs.server.MyResource errors were found
</code></pre>

Please help. Any advise is appreciated. I do make a lot of search on google but fails to make it work. <a href="https://stackoverflow.com/questions/18463311/jersey-2-how-to-replace-injectableprovider-and-abstracthttpcontextinjectable">Jersey 2.*. How to replace InjectableProvider and AbstractHttpContextInjectable of Jersey 1.*</a> might be the similar question.

-- UPDATES:
I use AbstractBinder to bind my resolver to UserAuthHeaderParam:

<pre><code>public class MyApplication extends ResourceConfig
{

public MyApplication()
{
 register(new AbstractBinder()
 {
 @Override
 protected void configure()
 {
 // bindFactory(UrlStringFactory.class).to(String.class);
 bind(UrlStringInjectResolver.class).to(new TypeLiteral&lt;InjectionResolver&lt;UrlInject&gt;&gt;()
 {
 }).in(Singleton.class);
 }
 });
 packages("rs");

}

}
</code></pre>

Thank you!

jersey 2: How to create custom HTTP param binding

身份验证

数据库

服务器

我正在尝试为我的restful服务创建一个自定义的http参数绑定。请参考下面的示例。@POST@Path("/user/{userId}/orders")@Produces(MediaType.APPLICATION_JSON)@Consumes(MediaType.APPLICATION_JSON)public M...

问jersey 2:如何创建自定义HTTP参数绑定
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问jersey 2:如何创建自定义HTTP参数绑定EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问jersey 2:如何创建自定义HTTP参数绑定
EN