[ 
https://issues.apache.org/jira/browse/CXF-5698?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13973078#comment-13973078
 ] 

Sergey Beryozkin commented on CXF-5698:
---------------------------------------

Hi Aki, 
Thanks for the explanation, right I see what you mean now.
I propose we keep this issue open because this restriction can be a problem, 
even though it is reasonable to expect the client know the initial endpoint 
address ending with "/bookstore" and consider introducing a property such as 
"endpoint.address" which will let the transport correctly determine the actual 
root during the upgrade
Cheers, Sergey


> Use the service root path instead of the initial request path to restrict 
> websocket service access
> --------------------------------------------------------------------------------------------------
>
>                 Key: CXF-5698
>                 URL: https://issues.apache.org/jira/browse/CXF-5698
>             Project: CXF
>          Issue Type: Improvement
>          Components: Transports
>            Reporter: Aki Yoshida
>            Assignee: Aki Yoshida
>             Fix For: 3.0.0
>
>
> Currently, the URL path used to initiate the websocket connection is used to 
> allow or restrict the subsequent operations received over the websocket.
> This is not convenient as the caller must know the service root path to be 
> able to invoke all the operations supported by the service. A more convenient 
> approach would be to use the service root path as the filter so that the 
> subsequent requests to one of its operations can be processed even if the 
> initial connection request uses one of these sub resource paths.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to