Skip to main content

[jsr339-experts] Apache HTTP Client + JAX-RS

  • From: Bill Burke <bburke@...>
  • To: jsr339-experts@...
  • Subject: [jsr339-experts] Apache HTTP Client + JAX-RS
  • Date: Tue, 13 Nov 2012 11:34:11 -0500

I actually think this is quite important to think about how Apache HTTP client effects JAX-RS. Specifically on the security stuff we're thinking about adding to the spec.

For example, if you look at how you configure HTTPS and client-cert auth for Apache HC, you notice that you cannot really set things up on the fly, you can't really modify them on the fly either. These things need to be available before you make one connection with Apache HC client:

* server truststore (for HTTPS)
* client keystore (for client-cert auth)
* In some situations a hostname verifier is needed.

This is leading me to believe that simple security properties aren't gonna cut it and we're gonna need some builder API to bind security config to a Client or WebTarget. Basically a builder API says "I'm done configuring connection properties, you can build the DefaultHttpClient now!" I'm prototyping one at the moment and will be ready to propose something soon, but it would be cool to get your thoughts on this.

On 11/12/2012 9:33 AM, Jan Algermissen wrote:

On Nov 12, 2012, at 3:30 PM, Santiago Pericas-Geertsen 
<Santiago.PericasGeertsen@...> wrote:

On Nov 12, 2012, at 6:52 AM, Sergey Beryozkin <sberyozkin@...> wrote:

On 11/11/12 19:21, Jan Algermissen wrote:
Marek, Santiago,

can you provide any preview of how Apache-Client support will look in 
Jersey's Apache package?

I would like to explore the implications of the new configuration and async 
aspects in combination with Apache's client 'specialties'.

Is is a spec related issue ? I'd assume this should be discussed on the 
Jersey list

Yes. Jan, please forward your question to the Jersey alias.

Sorry - I was thinking this over and since I am primarily interested in the 
implications the new API has when using a client such as Apache I felt the EG 
was the better list. If you object, never mind. I'll take it elsewhere.

(just so you know I did not carelessly put it here)


-- Santiago

Bill Burke
JBoss, a division of Red Hat

[jsr339-experts] Apache client in Jersey

Jan Algermissen 11/11/2012

[jsr339-experts] Re: Apache client in Jersey

Sergey Beryozkin 11/12/2012

[jsr339-experts] Re: [jax-rs-spec users] Re: Apache client in Jersey

Santiago Pericas-Geertsen 11/12/2012

[jsr339-experts] Re: [jax-rs-spec users] Re: Apache client in Jersey

Jan Algermissen 11/12/2012

[jsr339-experts] Apache HTTP Client + JAX-RS

Bill Burke 11/13/2012

[jsr339-experts] Re: Apache HTTP Client + JAX-RS

Jan Algermissen 11/20/2012

[jsr339-experts] Re: Apache HTTP Client + JAX-RS

Bill Burke 11/21/2012
Please Confirm