Thanks for this detailed email, Ron
I must admit I cannot convince myself whether asking users to add the annotation to validate or asking users to add the annotation to disable is correct. That's why I had not replied yet. At the moment, I tend to agree with Santiago that this should be on by default.
Yes, I think for the JAX-RS case that probably makes sense.
The question is whether that's something which must be defined by the
spec or whether a user might simply enable validation on a global
level using some sort of descriptor file (like validation.xml for BV
or beans.xml for CDI). I think personally I'd prefer the latter option
as it is a bit less “auto-magic“. A way to globally turn off method
validation would probably needed in the case it's implicitly enabled
Have you given any more thought to this issue? I.e., the ability to globally turn validation on/off?
I don't know though, whether there is such global descriptor for JAX-XS.
We don't have one. If BV does not provide a mechanism for this, we'll likely need to define a new annotation in JAX-RS to disable validation.