Jersey Documentation 2.25.1 User Guide
Jersey Documentation 2.25.1 User Guide
1 User Guide
Jersey 2.25.1 User Guide
Table of Contents
Preface ............................................................................................................................ xvi
1. Getting Started ................................................................................................................ 1
1.1. Creating a New Project from Maven Archetype .......................................................... 1
1.2. Exploring the Newly Created Project ........................................................................ 1
1.3. Running the Project ............................................................................................... 3
1.4. Creating a JavaEE Web Application ......................................................................... 5
1.5. Creating a Web Application that can be deployed on Heroku ........................................ 6
1.5.1. Deploy it on Heroku ................................................................................... 8
1.6. Exploring Other Jersey Examples ........................................................................... 11
2. Modules and dependencies .............................................................................................. 12
2.1. Java SE Compatibility .......................................................................................... 12
2.2. Introduction to Jersey dependencies ........................................................................ 12
2.3. Common Jersey Use Cases ................................................................................... 12
2.3.1. Servlet based application on Glassfish .......................................................... 12
2.3.2. Servlet based server-side application ............................................................ 13
2.3.3. Client application on JDK .......................................................................... 13
2.3.4. Server-side application on supported containers .............................................. 14
2.4. List of modules ................................................................................................... 15
3. JAX-RS Application, Resources and Sub-Resources ............................................................. 37
3.1. Root Resource Classes ......................................................................................... 37
3.1.1. @Path ..................................................................................................... 37
3.1.2. @GET, @PUT, @POST, @DELETE, ... (HTTP Methods) ............................... 38
3.1.3. @Produces ............................................................................................... 39
3.1.4. @Consumes ............................................................................................. 40
3.2. Parameter Annotations (@*Param) ......................................................................... 41
3.3. Sub-resources ..................................................................................................... 45
3.4. Life-cycle of Root Resource Classes ....................................................................... 48
3.5. Rules of Injection ................................................................................................ 49
3.6. Use of @Context ................................................................................................ 52
3.7. Programmatic resource model ................................................................................ 52
4. Application Deployment and Runtime Environments ............................................................ 53
4.1. Introduction ........................................................................................................ 53
4.2. JAX-RS Application Model .................................................................................. 53
4.3. Auto-Discoverable Features ................................................................................... 54
4.3.1. Configuring Feature Auto-discovery Mechanism ............................................ 54
4.4. Configuring the Classpath Scanning ....................................................................... 55
4.5. Java SE Deployment Environments ........................................................................ 57
4.5.1. HTTP servers ........................................................................................... 57
4.6. Creating programmatic JAX-RS endpoint ................................................................ 60
4.7. Servlet-based Deployment ..................................................................................... 60
4.7.1. Servlet 2.x Container ................................................................................. 60
4.7.2. Servlet 3.x Container ................................................................................. 62
4.7.3. Jersey Servlet container modules ................................................................. 66
4.8. Java EE Platform ................................................................................................ 67
4.8.1. Managed Beans ........................................................................................ 67
4.8.2. Context and Dependency Injection (CDI) ...................................................... 67
4.8.3. Enterprise Java Beans (EJB) ....................................................................... 68
4.8.4. Java EE Servers ........................................................................................ 68
4.9. OSGi ................................................................................................................. 69
4.9.1. Enabling the OSGi shell in Glassfish ............................................................ 70
4.9.2. WAB Example ......................................................................................... 71
iii
Jersey 2.25.1 User Guide
iv
Jersey 2.25.1 User Guide
v
Jersey 2.25.1 User Guide
vi
Jersey 2.25.1 User Guide
vii
Jersey 2.25.1 User Guide
viii
List of Figures
6.1. Travel Agency Orchestration Service .............................................................................. 90
6.2. Time consumed to create a response for the client – synchronous way ................................... 91
6.3. Time consumed to create a response for the client – asynchronous way ................................. 93
ix
List of Tables
2.1. Jersey Core ................................................................................................................ 15
2.2. Jersey Containers ........................................................................................................ 15
2.3. Jersey Connectors ........................................................................................................ 17
2.4. Jersey Media .............................................................................................................. 17
2.5. Jersey Extensions ........................................................................................................ 18
2.6. Jersey Test Framework ................................................................................................. 22
2.7. Jersey Test Framework Providers ................................................................................... 24
2.8. Jersey Glassfish Bundles .............................................................................................. 25
2.9. Security ..................................................................................................................... 25
2.10. Jersey Examples ........................................................................................................ 26
3.1. Resource scopes .......................................................................................................... 49
3.2. Overview of injection types .......................................................................................... 51
4.1. Servlet 3 Pluggability Overview ..................................................................................... 66
5.1. List of Jersey Connectors .............................................................................................. 82
9.1. Default property values for MOXy MessageBodyReader<T> / MessageBodyWriter<T> ......... 131
28.1. List of changed configuration properties: ...................................................................... 305
28.2. Mapping of Jersey 1.x to JAX-RS 2.0 client classes ....................................................... 316
28.3. JSON approaches and usage in Jersey 1 vs Jersey 2 ........................................................ 319
A.1. List of common configuration properties ....................................................................... 322
A.2. List of server configuration properties .......................................................................... 323
A.3. List of servlet configuration properties .......................................................................... 329
A.4. List of client configuration properties ........................................................................... 331
x
List of Examples
3.1. Simple hello world root resource class ............................................................................ 37
3.2. Specifying URI path parameter ...................................................................................... 38
3.3. PUT method ............................................................................................................... 39
3.4. Specifying output MIME type ....................................................................................... 39
3.5. Using multiple output MIME types ................................................................................ 40
3.6. Server-side content negotiation ...................................................................................... 40
3.7. Specifying input MIME type ......................................................................................... 41
3.8. Query parameters ........................................................................................................ 41
3.9. Custom Java type for consuming request parameters .......................................................... 41
3.10. Processing POSTed HTML form .................................................................................. 43
3.11. Obtaining general map of URI path and/or query parameters ............................................. 43
3.12. Obtaining general map of header parameters .................................................................. 43
3.13. Obtaining general map of form parameters ..................................................................... 43
3.14. Example of the bean which will be used as @BeanParam ................................................. 44
3.15. Injection of MyBeanParam as a method parameter: .......................................................... 44
3.16. Injection of more beans into one resource methods: ......................................................... 45
3.17. Sub-resource methods ................................................................................................. 45
3.18. Sub-resource locators ................................................................................................. 46
3.19. Sub-resource locators with empty path .......................................................................... 47
3.20. Sub-resource locators returning sub-type ........................................................................ 47
3.21. Sub-resource locators created from classes ..................................................................... 47
3.22. Sub-resource locators returning resource model ............................................................... 48
3.23. Injection ................................................................................................................... 49
3.24. Wrong injection into a singleton scope .......................................................................... 50
3.25. Injection of proxies into singleton ................................................................................. 50
3.26. Example of possible injections ..................................................................................... 51
4.1. Deployment agnostic application model ........................................................................... 53
4.2. Reusing Jersey implementation in your custom application model ........................................ 54
4.3. Registering SPI implementations using ResourceConfig ..................................................... 56
4.4. Registering SPI implementations using ResourceConfig subclass ................................... 56
4.5. Using Jersey with JDK HTTP Server .............................................................................. 57
4.6. Using Jersey with Grizzly HTTP Server .......................................................................... 58
4.7. Using Jersey with the Simple framework ......................................................................... 58
4.8. Using Jersey with Jetty HTTP Server .............................................................................. 59
4.9. Using Jersey with Netty HTTP Server ............................................................................ 59
4.10. Hooking up Jersey as a Servlet .................................................................................... 60
4.11. Hooking up Jersey as a Servlet Filter ............................................................................ 60
4.12. Configuring Jersey container Servlet or Filter to use custom Application subclass ............ 61
4.13. Configuring Jersey container Servlet or Filter to use package scanning ................................ 62
4.14. Configuring Jersey container Servlet or Filter to use a list of classes ................................... 62
4.15. Deployment of a JAX-RS application using @ApplicationPath with Servlet 3.0 .............. 63
4.16. Configuration of maven-war-plugin to ignore missing web.xml ........................................ 63
4.17. Deployment of a JAX-RS application using web.xml with Servlet 3.0 ............................... 63
4.18. web.xml of a JAX-RS application without an Application subclass ............................. 64
4.19. ................................................................................................................................ 65
4.20. ................................................................................................................................ 70
5.1. POST request with form parameters ............................................................................... 75
5.2. Using JAX-RS Client API ............................................................................................ 80
5.3. Using JAX-RS Client API fluently ................................................................................. 81
5.4. Sending restricted headers with HttpUrlConnector ..................................................... 84
5.5. Closing connections ..................................................................................................... 85
xi
Jersey 2.25.1 User Guide
xii
Jersey 2.25.1 User Guide
9.13. Creating JAX-RS application with JSON-Processing JSON feature enabled. ........................ 132
9.14. ContextResolver<ObjectMapper> ................................................................... 134
9.15. Building client with Jackson JSON feature enabled. ....................................................... 134
9.16. Creating JAX-RS application with Jackson JSON feature enabled. .................................... 134
9.17. JAXB beans for JSON supported notations description, simple address bean ....................... 135
9.18. JAXB beans for JSON supported notations description, contact bean ................................. 136
9.19. JAXB beans for JSON supported notations description, initialization ................................. 136
9.20. XML namespace to JSON mapping configuration for Jettison based mapped notation .......... 136
9.21. JSON expression with XML namespaces mapped into JSON ........................................... 137
9.22. JSON Array configuration for Jettison based mapped notation ........................................ 137
9.23. JSON expression with JSON arrays explicitly configured via Jersey .................................. 137
9.24. JSON expression produced using badgerfish notation ................................................ 138
9.25. ContextResolver<ObjectMapper> ................................................................... 138
9.26. Building client with Jettison JSON feature enabled. ........................................................ 138
9.27. Creating JAX-RS application with Jettison JSON feature enabled. ..................................... 139
9.28. Simplest case of using @JSONP ................................................................................. 139
9.29. JaxbBean for @JSONP example ................................................................................. 139
9.30. Example of @JSONP with configured parameters. .......................................................... 140
9.31. Low level XML test - methods added to HelloWorldResource.java ........................ 141
9.32. Planet class ............................................................................................................. 142
9.33. Resource class ......................................................................................................... 142
9.34. Method for consuming Planet ..................................................................................... 143
9.35. Resource class - JAXBElement .................................................................................. 143
9.36. Client side - JAXBElement ........................................................................................ 144
9.37. PlanetJAXBContextProvider ...................................................................................... 144
9.38. Using Provider with JAX-RS client ............................................................................. 145
9.39. Add jersey-media-moxy dependency. ................................................................... 145
9.40. Register the MoxyXmlFeature class. ....................................................................... 145
9.41. Configure and register an MoxyXmlFeature instance. ................................................. 146
9.42. Building client with MultiPart feature enabled. .............................................................. 147
9.43. Creating JAX-RS application with MultiPart feature enabled. ........................................... 147
9.44. MultiPart entity .................................................................................................. 147
9.45. MultiPart entity in HTTP message. ........................................................................ 148
9.46. FormDataMultiPart entity .................................................................................. 148
9.47. FormDataMultiPart entity in HTTP message. ........................................................ 148
9.48. Multipart - sending files. ........................................................................................... 149
9.49. Resource method using MultiPart as input parameter / return value. .............................. 149
9.50. Use of @FormDataParam annotation ........................................................................ 150
10.1. Container response filter ............................................................................................ 152
10.2. Container request filter .............................................................................................. 153
10.3. Pre-matching request filter ......................................................................................... 154
10.4. Client request filter .................................................................................................. 155
10.5. GZIP writer interceptor ............................................................................................. 156
10.6. GZIP reader interceptor ............................................................................................. 157
10.7. @NameBinding example ......................................................................................... 159
10.8. Dynamic binding example ......................................................................................... 160
10.9. Priorities example .................................................................................................... 162
11.1. Simple async resource .............................................................................................. 163
11.2. Simple async method with timeout .............................................................................. 164
11.3. CompletionCallback example ..................................................................................... 165
11.4. ChunkedOutput example ........................................................................................... 167
11.5. Simple client async invocation ................................................................................... 168
11.6. Simple client fluent async invocation ........................................................................... 168
11.7. Client async callback ................................................................................................ 169
xiii
Jersey 2.25.1 User Guide
xiv
Jersey 2.25.1 User Guide
19.3. Registering and configuring entity-filtering feature based on dynamic and configurable query
parameters. ..................................................................................................................... 234
19.4. Registering and configuring entity-filtering feature on client. ........................................... 234
19.5. Project .................................................................................................................... 234
19.6. User ....................................................................................................................... 235
19.7. Task ...................................................................................................................... 235
19.8. ProjectsResource ...................................................................................................... 235
19.9. ProjectDetailedView ................................................................................................. 236
19.10. Annotated Project ................................................................................................... 237
19.11. Annotated User ...................................................................................................... 237
19.12. Annotated Task ...................................................................................................... 237
19.13. ProjectsResource - Response entity-filtering annotations ................................................ 239
19.14. ProjectsResource - Entity-filtering annotations on methods ............................................ 239
19.15. Client - Request entity-filtering annotations ................................................................. 240
19.16. Client - Request entity-filtering annotations ................................................................. 240
19.17. Sever - Query Parameter driven entity-filtering ............................................................ 242
19.18. ............................................................................................................................ 242
19.19. Entity-filtering annotation with custom meaning .......................................................... 242
19.20. Entity Data Filtering support in MOXy JSON binding provider ....................................... 243
20.1. Using Viewable in a resource class .......................................................................... 245
20.2. Using @Template on a resource method .................................................................... 246
20.3. Using @Template on a resource class ....................................................................... 246
20.4. Using absolute path to template in Viewable .............................................................. 248
20.5. Using @ErrorTemplate on a resource method .......................................................... 249
20.6. Using @ErrorTemplate with Bean Validation .......................................................... 249
20.7. Iterating through ValidationError in JSP .............................................................. 249
20.8. Registering MvcFeature ......................................................................................... 250
20.9. Registering FreemarkerMvcFeature ..................................................................... 250
20.10. Setting MvcFeature.TEMPLATE_BASE_PATH value in ResourceConfig ............... 250
20.11. Setting FreemarkerMvcProperties.TEMPLATE_BASE_PATH value in
web.xml ....................................................................................................................... 251
20.12. Including JSP page into JSP page ............................................................................. 254
20.13. Custom TemplateProcessor ...................................................................................... 255
20.14. Registering custom TemplateProcessor ....................................................................... 255
21.1. Logging on client-side .............................................................................................. 258
21.2. Register LoggingFeature via constructor ................................................................ 259
21.3. Register LoggingFeature class ............................................................................. 259
22.1. Application event listener .......................................................................................... 261
22.2. Request event listener ............................................................................................... 261
22.3. Event listener test resource ........................................................................................ 262
22.4. Injecting MonitoringStatistics ..................................................................................... 264
22.5. Summary level messages ........................................................................................... 272
22.6. On demand request, snippet of MVC JSP forwarding ..................................................... 272
24.1. Bootstrapping Jersey application with Weld support on Grizzly ........................................ 283
28.1. Jersey 1 reloader implementation ................................................................................ 314
28.2. Jersey 1 reloader registration ...................................................................................... 315
28.3. Jersey 2 reloader implementation ................................................................................ 315
28.4. Jersey 2 reloader registration ...................................................................................... 316
28.5. Initializing JAXB-based support with MOXy ................................................................ 319
xv
Preface
This is user guide for Jersey 2.25.1. We are trying to keep it up to date as we add new features. When reading
the user guide, please consult also our Jersey API documentation [https://jersey.java.net/apidocs/2.25.1/
jersey/index.html] as an additional source of information about Jersey features and API.
If you would like to contribute to the guide or have questions on things not covered in our docs, please
contact us [email protected] [mailto:[email protected]]. Similarly, in case you spot any errors
in the Jersey documentation, please report them by filing a new issue in our Jersey JIRA Issue Tracker
[http://java.net/jira/browse/JERSEY] under docs component. Please make sure to specify the version of
the Jersey User Guide where the error has been spotted by selecting the proper value for the Affected
Version field.
Emphasised font is used to a call attention to a newly introduce concept, when it first occurs in the text.
In some of the code listings, certain lines are too long to be displayed on one line for the available page
width. In such case, the lines that exceed the available page width are broken up into multiple lines using
a '\' at the end of each line to indicate that a break has been introduced to fit the line in the page. For
example:
This is an overly long line that might not fit the available page width and had to
xvi
Chapter 1. Getting Started
This chapter provides a quick introduction on how to get started building RESTful services using Jersey.
The example described here uses the lightweight Grizzly HTTP server. At the end of this chapter you will
see how to implement equivalent functionality as a JavaEE web application you can deploy on any servlet
container supporting Servlet 2.5 and higher.
Note
In case you want to depend on the latest SNAPSHOT versions of Jersey modules, the following
repository configuration needs to be added to your Maven project pom:
<repository>
<id>snapshot-repository.java.net</id>
<name>Java.net Snapshot Repository for Maven</name>
<url>https://maven.java.net/content/repositories/snapshots/</url>
<layout>default</layout>
</repository>
Since starting from a Maven project is the most convenient way for working with Jersey, let's now have
a look at this approach. We will now create a new Jersey project that runs on top of a Grizzly [http://
grizzly.java.net/] container. We will use a Jersey-provided maven archetype. To create the project, execute
the following Maven command in the directory where the new project should reside:
Feel free to adjust the groupId, package and/or artifactId of your new project. Alternatively,
you can change it by updating the new project pom.xml once it gets generated.
Project build and management configuration is described in the pom.xml located in the project root
directory.
Project sources are located under src/main/java.
1
Getting Started
1 package com.example;
2
3 import javax.ws.rs.GET;
4 import javax.ws.rs.Path;
5 import javax.ws.rs.Produces;
6 import javax.ws.rs.core.MediaType;
7
8 /**
9 * Root resource (exposed at "myresource" path)
10 */
11 @Path("myresource")
12 public class MyResource {
13
14 /**
15 * Method handling HTTP GET requests. The returned object will be sent
16 * to the client as "text/plain" media type.
17 *
18 * @return String that will be returned as a text/plain response.
19 */
20 @GET
21 @Produces(MediaType.TEXT_PLAIN)
22 public String getIt() {
23 return "Got it!";
24 }
25 }
A JAX-RS resource is an annotated POJO that provides so-called resource methods that are able to handle
HTTP requests for URI paths that the resource is bound to. See Chapter 3, JAX-RS Application, Resources
and Sub-Resources for a complete guide to JAX-RS resources. In our case, the resource exposes a single
resource method that is able to handle HTTP GET requests, is bound to /myresource URI path and
can produce responses with response message content represented in "text/plain" media type. In this
version, the resource returns the same "Got it!" response to all client requests.
The last piece of code that has been generated in this skeleton project is a MyResourceTest unit test
class that is located in the same com.example package as the MyResource class, however, this unit
test class is placed into the maven project test source directory src/test/java (certain code comments
and JUnit imports have been excluded for brevity):
1 package com.example;
2
3 import javax.ws.rs.client.Client;
4 import javax.ws.rs.client.ClientBuilder;
5 import javax.ws.rs.client.WebTarget;
6
7 import org.glassfish.grizzly.http.server.HttpServer;
8
9 ...
10
11 public class MyResourceTest {
2
Getting Started
12
13 private HttpServer server;
14 private WebTarget target;
15
16 @Before
17 public void setUp() throws Exception {
18 server = Main.startServer();
19
20 Client c = ClientBuilder.newClient();
21 target = c.target(Main.BASE_URI);
22 }
23
24 @After
25 public void tearDown() throws Exception {
26 server.stop();
27 }
28
29 /**
30 * Test to see that the message "Got it!" is sent in the response.
31 */
32 @Test
33 public void testGetIt() {
34 String responseMsg = target.path("myresource").request().get(String.cla
35 assertEquals("Got it!", responseMsg);
36 }
37 }
In this unit test, a Grizzly container is first started and server application is deployed in the test setUp()
method by a static call to Main.startServer(). Next, a JAX-RS client components are created in
the same test set-up method. First a new JAX-RS client instance c is built and then a JAX-RS web target
component pointing to the context root of our application deployed at http://localhost:8080/
myapp/ (a value of Main.BASE_URI constant) is stored into a target field of the unit test class. This
field is then used in the actual unit test method (testGetIt()).
In the testGetIt() method a fluent JAX-RS Client API is used to connect to and send a HTTP GET
request to the MyResource JAX-RS resource class listening on /myresource URI. As part of the
same fluent JAX-RS API method invocation chain, a response is read as a Java String type. On the
second line in the test method, the response content string returned from the server is compared with
the expected phrase in the test assertion. To learn more about using JAX-RS Client API, please see the
Chapter 5, Client API chapter.
This will compile the project and run the project unit tests. We should see a similar output that informs
about a successful build once the build is finished:
Results :
3
Getting Started
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 34.527s
[INFO] Finished at: Sun May 26 19:26:24 CEST 2013
[INFO] Final Memory: 17M/490M
[INFO] ------------------------------------------------------------------------
Now that we have verified that the project compiles and that the unit test passes, we can execute the
application in a standalone mode. To do this, run the following maven command:
mvn exec:java
The application starts and you should soon see the following notification in your console:
This informs you that the application has been started and it's WADL descriptor is available at http://
localhost:8080/myapp/application.wadl URL. You can retrieve the WADL content by
executing a curl http://localhost:8080/myapp/application.wadl command in your
console or by typing the WADL URL into your favorite browser. You should get back an XML document
in describing your deployed RESTful application in a WADL format. To learn more about working with
WADL, check the Chapter 17, WADL Support chapter.
The last thing we should try before concluding this section is to see if we can communicate with our
resource deployed at /myresource path. We can again either type the resource URL in the browser
or we can use curl:
$ curl http://localhost:8080/myapp/myresource
Got it!
As we can see, the curl command returned with the Got it! message that was sent by our resource.
We can also ask curl to provide more information about the response, for example we can let it display
all response headers by using the -i switch:
curl -i http://localhost:8080/myapp/myresource
HTTP/1.1 200 OK
Content-Type: text/plain
Date: Sun, 26 May 2013 18:27:19 GMT
Content-Length: 7
Got it!
Here we see the whole content of the response message that our Jersey/JAX-RS application returned,
including all the HTTP headers. Notice the Content-Type: text/plain header that was
derived from the value of @Produces [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
Produces.html] annotation attached to the MyResource class.
In case you want to see even more details about the communication between our curl client and our
resource running on Jersey in a Grizzly I/O container, feel free to try other various options and switches
4
Getting Started
that curl provides. For example, this last command will make curl output a lot of additional information
about the whole communication:
$ curl -v http://localhost:8080/myapp/myresource
* About to connect() to localhost port 8080 (#0)
* Trying ::1...
* Connection refused
* Trying 127.0.0.1...
* connected
* Connected to localhost (127.0.0.1) port 8080 (#0)
> GET /myapp/myresource HTTP/1.1
> User-Agent: curl/7.25.0 (x86_64-apple-darwin11.3.0) libcurl/7.25.0 OpenSSL/1.0.1e
> Host: localhost:8080
> Accept: */*
>
< HTTP/1.1 200 OK
< Content-Type: text/plain
< Date: Sun, 26 May 2013 18:29:18 GMT
< Content-Length: 7
<
* Connection #0 to host localhost left intact
Got it!* Closing connection #0
As with the Grizzly based project, feel free to adjust the groupId, package and/or artifactId of
your new web application project. Alternatively, you can change it by updating the new project pom.xml
once it gets generated.
Once the project generation from a Jersey maven archetype is successfully finished, you should see the new
simple-service-webapp project directory created in your current location. The directory contains a
standard Maven project structure, similar to the simple-service project content we have seen earlier,
except it is extended with an additional web application specific content:
Project build and management configuration is described in the pom.xml located in the project root
directory.
Project sources are located under src/main/java.
Project resources are located under src/main/resources.
Project web application files are located under src/main/webapp.
The project contains the same MyResouce JAX-RS resource class. It does not contain any unit tests as
well as it does not contain a Main class that was used to setup Grizzly container in the previous project.
Instead, it contains the standard Java EE web application web.xml deployment descriptor under src/
main/webapp/WEB-INF. The last component in the project is an index.jsp page that serves as a
client for the MyResource resource class that is packaged and deployed with the application.
5
Getting Started
To compile and package the application into a WAR, invoke the following maven command in your
console:
A successful build output will produce an output similar to the one below:
Results :
[INFO]
[INFO] --- maven-war-plugin:2.1.1:war (default-war) @ simple-service-webapp ---
[INFO] Packaging webapp
[INFO] Assembling webapp [simple-service-webapp] in [.../simple-service-webapp/targ
[INFO] Processing war project
[INFO] Copying webapp resources [.../simple-service-webapp/src/main/webapp]
[INFO] Webapp assembled in [75 msecs]
[INFO] Building war: .../simple-service-webapp/target/simple-service-webapp.war
[INFO] WEB-INF/web.xml already added, skipping
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 9.067s
[INFO] Finished at: Sun May 26 21:07:44 CEST 2013
[INFO] Final Memory: 17M/490M
[INFO] ------------------------------------------------------------------------
Now you are ready to take the packaged WAR (located under ./target/simple-service-
webapp.war) and deploy it to a Servlet container of your choice.
Important
To deploy a Jersey application, you will need a Servlet container that supports Servlet 2.5 or later.
For full set of advanced features (such as JAX-RS 2.0 Async Support) you will need a Servlet
3.0 or later compliant container.
Adjust the groupId, package and/or artifactId of your new web application project to your needs
or, alternatively, you can change it by updating the new project pom.xml once it gets generated.
6
Getting Started
Once the project generation from a Jersey maven archetype is successfully finished, you should see the new
simple-heroku-webapp project directory created in your current location. The directory contains a
standard Maven project structure:
Project build and management configuration is described in the pom.xml located in the project root
directory.
Project sources are located under src/main/java.
Project resources are located under src/main/resources.
Project web application files are located under src/main/webapp.
Project test-sources (based on JerseyTest [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/test/JerseyTest.html]) are located under src/test/java.
Heroku system properties (OpenJDK version) are defined in system.properties.
Lists of the process types in an application for Heroku is in Procfile.
The project contains one JAX-RS resource class, MyResouce, and one resource method which returns
simple text message. To make sure the resource is properly tested there is also a end-to-end test-
case in MyResourceTest (the test is based on JerseyTest [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/test/JerseyTest.html] from our Chapter 26, Jersey Test Framework). Similarly to
simple-service-webapp, the project contains the standard Java EE web application web.xml
deployment descriptor under src/main/webapp/WEB-INF since the goal is to deploy the application
in a Servlet container (the application will run in Jetty on Heroku).
To compile and package the application into a WAR, invoke the following maven command in your
console:
A successful build output will produce an output similar to the one below:
Results :
[INFO]
[INFO] --- maven-war-plugin:2.2:war (default-war) @ simple-heroku-webapp ---
[INFO] Packaging webapp
[INFO] Assembling webapp [simple-heroku-webapp] in [.../simple-heroku-webapp/ta
[INFO] Processing war project
[INFO] Copying webapp resources [.../simple-heroku-webapp/src/main/webapp]
[INFO] Webapp assembled in [57 msecs]
[INFO] Building war: .../simple-heroku-webapp/target/simple-heroku-webapp.war
[INFO] WEB-INF/web.xml already added, skipping
[INFO]
[INFO] --- maven-dependency-plugin:2.8:copy-dependencies (copy-dependencies) @
[INFO] Copying hk2-locator-2.2.0-b21.jar to .../simple-heroku-webapp/target/dep
[INFO] Copying jetty-security-9.0.6.v20130930.jar to .../simple-heroku-webapp/t
[INFO] Copying asm-all-repackaged-2.2.0-b21.jar to .../simple-heroku-webapp/tar
[INFO] Copying jersey-common-2.5.jar to .../simple-heroku-webapp/target/depende
[INFO] Copying validation-api-1.1.0.Final.jar to .../simple-heroku-webapp/targe
[INFO] Copying jetty-webapp-9.0.6.v20130930.jar to .../simple-heroku-webapp/tar
[INFO] Copying jersey-container-servlet-2.5.jar to .../simple-heroku-webapp/tar
[INFO] Copying cglib-2.2.0-b21.jar to .../simple-heroku-webapp/target/dependenc
[INFO] Copying osgi-resource-locator-1.0.1.jar to .../simple-heroku-webapp/targ
[INFO] Copying hk2-utils-2.2.0-b21.jar to .../simple-heroku-webapp/target/depen
[INFO] Copying hk2-api-2.2.0-b21.jar to .../simple-heroku-webapp/target/depende
[INFO] Copying jetty-io-9.0.6.v20130930.jar to .../simple-heroku-webapp/target/
7
Getting Started
Now that you know everything went as expected you are ready to:
Tip
If you want to make some changes to your application you can run the application
locally by simply running mvn clean package jetty:run (which starts the
embedded Jetty server) or by java -cp target/classes:target/dependency/*
com.example.heroku.Main (this is how Jetty is started on Heroku).
$ git init
Initialized empty Git repository in /.../simple-heroku-webapp/.git/
Then, create a Heroku [https://www.heroku.com] instance and add a remote reference to your Git
repository:
$ heroku create
Creating simple-heroku-webapp... done, stack is cedar
http://simple-heroku-webapp.herokuapp.com/ | [email protected]:simple-heroku-webap
8
Getting Started
Note
The name of the instance is changed in the output to simple-heroku-webapp. Your will be
named more like tranquil-basin-4744.
9
Getting Started
10
Getting Started
To [email protected]:simple-heroku-webapp.git
* [new branch] master -> master
Now you can access your application at, for example: http://simple-heroku-webapp.herokuapp.com/
myresource
Jersey codebase contains a number of useful examples on how to use various JAX-RS and Jersey features.
Feel free to browse through the code of individual Jersey Examples [https://github.com/jersey/jersey/
tree/2.25.1/examples] in the Jersey source repository. For off-line browsing, you can also download a
bundle with all the examples from here [https://maven.java.net/content/repositories/releases/org/glassfish/
jersey/bundles/jersey-examples/2.25.1/].
11
Chapter 2. Modules and dependencies
2.1. Java SE Compatibility
Until version 2.6, Jersey was compiled with Java SE 6. This has changes in Jersey 2.7. Now almost all
Jersey components are compiled with Java SE 7 target. It means, that you will need at least Java SE 7 to
be able to compile and run your application that is using latest Jersey. Only core-common and core-
client modules are still compiled with Java class version runnable with Java SE 6.
An application that uses Jersey and depends on Jersey modules is in turn required to also include in the
application dependencies the set of 3rd party modules that Jersey modules depend on. Jersey is designed
as a pluggable component architecture and different applications can therefore require different sets of
Jersey modules. This also means that the set of external Jersey dependencies required to be included in the
application dependencies may vary in each application based on the Jersey modules that are being used
by the application.
Developers using Maven or a Maven-aware build system in their projects are likely to find it easier to
include and manage dependencies of their applications compared to developers using ant or other build
systems that are not compatible with Maven. This document will explain to both maven and non-maven
developers how to depend on Jersey modules in their application. Ant developers are likely to find the Ant
Tasks for Maven [http://maven.apache.org/ant-tasks/index.html] very useful.
<dependency>
<groupId>javax.ws.rs</groupId>
<artifactId>javax.ws.rs-api</artifactId>
<version>2.0.1</version>
<scope>provided</scope>
</dependency>
If you are using any Jersey specific feature, you will need to depend on Jersey directly.
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-servlet</artifactId>
12
Modules and dependencies
<version>2.25.1</version>
<scope>provided</scope>
</dependency>
<!-- if you are using Jersey client specific features without the server side -->
<dependency>
<groupId>org.glassfish.jersey.core</groupId>
<artifactId>jersey-client</artifactId>
<version>2.25.1</version>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<!-- if your container implements Servlet API older than 3.0, use "jersey-conta
<artifactId>jersey-container-servlet</artifactId>
<version>2.25.1</version>
</dependency>
<!-- Required only when you are using JAX-RS Client -->
<dependency>
<groupId>org.glassfish.jersey.core</groupId>
<artifactId>jersey-client</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.core</groupId>
<artifactId>jersey-client</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.connectors</groupId>
<artifactId>jersey-grizzly-connector</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
13
Modules and dependencies
<groupId>org.glassfish.jersey.connectors</groupId>
<artifactId>jersey-apache-connector</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.connectors</groupId>
<artifactId>jersey-jetty-connector</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-grizzly2-http</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-grizzly2-servlet</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-jdk-http</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-simple-http</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-jetty-http</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-jetty-servlet</artifactId>
<version>2.25.1</version>
</dependency>
14
Modules and dependencies
15
Modules and dependencies
Jersey Containers
jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
container-jetty-http/
dependencies.html]
jersey-container- Jetty Servlet Container
jetty-servlet [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
container-jetty-servlet/
dependencies.html]
jersey-container- Netty Http Container.
netty-http [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
container-netty-http/
dependencies.html]
jersey-container-servlet Jersey core Servlet 3.x implementation
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
container-servlet/
dependencies.html]
jersey-container- Jersey core Servlet 2.x implementation
servlet-core [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
container-servlet-core/
dependencies.html]
jersey-container- Simple Http Container
simple-http [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
container-simple-http/
dependencies.html]
jersey-gf-ejb [https:// Jersey EJB for GlassFish integration
jersey.java.net/
project-info/2.25.1/
jersey/project/
project/jersey-gf-ejb/
dependencies.html]
16
Modules and dependencies
17
Modules and dependencies
Jersey Media
media-json-jackson1/
dependencies.html]
jersey-media-json- Jersey JSON Jettison entity providers support module.
jettison [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
media-json-jettison/
dependencies.html]
jersey-media-json- Jersey JSON-P (JSR 353) entity providers support proxy module.
processing [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/jersey-media-
json-processing/
dependencies.html]
jersey-media-kryo Jersey/JAX-RS Message Body Writer and Reader using Kryo serialization framework
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
jersey-media-kryo/
dependencies.html]
jersey-media-moxy Jersey JSON entity providers support module based on EclipseLink MOXy.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
jersey-media-moxy/
dependencies.html]
jersey-media-multipart Jersey Multipart entity providers support module.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
media-multipart/
dependencies.html]
jersey-media-sse Jersey Server Sent Events entity providers support module.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
jersey-media-sse/
dependencies.html]
18
Modules and dependencies
Jersey Extensions
jersey-cdi1x [https:// Jersey CDI 1.1 integration
jersey.java.net/
project-info/2.25.1/
jersey/project/
project/jersey-cdi1x/
dependencies.html]
jersey-cdi1x-ban- Jersey CDI integration - this module disables custom HK2 bindings
custom-hk2-binding
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/project/
jersey-cdi1x-ban-
custom-hk2-binding/
dependencies.html]
jersey-cdi1x-servlet Jersey CDI 1.x Servlet Support
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/project/
jersey-cdi1x-servlet/
dependencies.html]
jersey-cdi1x- Jersey CDI 1.x Transactional Support
transaction [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/project/jersey-
cdi1x-transaction/
dependencies.html]
jersey-cdi1x-validation Jersey CDI 1.x Bean Validation Support
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/project/
jersey-cdi1x-validation/
dependencies.html]
jersey-declarative- Jersey support for declarative hyperlinking.
linking [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
declarative-linking/
dependencies.html]
jersey-entity-filtering Jersey extension module providing support for Entity Data Filtering.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
entity-filtering/
dependencies.html]
jersey-metainf-services Jersey extension module enabling automatic registration of JAX-RS providers (MBW/
[https://jersey.java.net/ MBR/EM) via META-INF/services mechanism.
project-info/2.25.1/
19
Modules and dependencies
Jersey Extensions
jersey/project/jersey-
metainf-services/
dependencies.html]
jersey-mvc [https:// Jersey extension module providing support for MVC.
jersey.java.net/project-
info/2.25.1/jersey/
project/jersey-mvc/
dependencies.html]
jersey-mvc-bean- Jersey extension module providing support for Bean Validation in MVC.
validation [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/jersey-mvc-
bean-validation/
dependencies.html]
jersey-mvc-freemarker Jersey extension module providing support for Freemarker templates.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
mvc-freemarker/
dependencies.html]
jersey-mvc-jsp [https:// Jersey extension module providing support for JSP templates.
jersey.java.net/project-
info/2.25.1/jersey/
project/jersey-mvc-jsp/
dependencies.html]
jersey-mvc-mustache Jersey extension module providing support for Mustache templates.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
mvc-mustache/
dependencies.html]
jersey-proxy-client Jersey extension module providing support for (proxy-based) high-level client API.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
jersey-proxy-client/
dependencies.html]
jersey-rx-client Jersey Reactive Client extension implementation.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/project/
jersey-rx-client/
dependencies.html]
jersey-rx-client-guava Jersey Reactive Client - Guava (ListenableFuture) provider.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/project/
20
Modules and dependencies
Jersey Extensions
jersey-rx-client-guava/
dependencies.html]
jersey-rx-client-java8 Jersey Reactive Client - Java 8 (CompletionStage) provider.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/project/
jersey-rx-client-java8/
dependencies.html]
jersey-rx-client-jsr166e Jersey Reactive Client - JSR-166e, pre-Java 8, (CompletableFuture) provider.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/project/
jersey-rx-client-jsr166e/
dependencies.html]
jersey-rx-client-rxjava Jersey Reactive Client - RxJava (Observable) provider.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/project/
jersey-rx-client-rxjava/
dependencies.html]
jersey-servlet- Library that enables writing web applications that run with both Jersey 1.x and Jersey 2.x
portability [https:// servlet containers.
jersey.java.net/
project-info/2.25.1/
jersey/project/jersey-
servlet-portability/
dependencies.html]
jersey-spring3 [https:// Jersey extension module providing support for Spring 3 integration.
jersey.java.net/project-
info/2.25.1/jersey/
project/jersey-spring3/
dependencies.html]
jersey-wadl-doclet A doclet that generates a resourcedoc xml file: this file contains the javadoc
[https://jersey.java.net/ documentation of resource classes, so that this can be used for extending generated wadl
project-info/2.25.1/ with useful documentation.
jersey/project/
jersey-wadl-doclet/
dependencies.html]
jersey-weld2-se WELD 2.x SE support
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/project/
jersey-weld2-se/
dependencies.html]
21
Modules and dependencies
22
Modules and dependencies
23
Modules and dependencies
24
Modules and dependencies
Security
oauth1-client [https:// Module that adds an OAuth 1 support to Jersey client.
jersey.java.net/project-
info/2.25.1/jersey/
project/oauth1-client/
dependencies.html]
oauth1-server [https:// Module that adds an OAuth 1 support to Jersey server
jersey.java.net/project-
info/2.25.1/jersey/
project/oauth1-server/
dependencies.html]
oauth1-signature OAuth1 signature module
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
oauth1-signature/
dependencies.html]
oauth2-client [https:// Module that adds an OAuth 2 support to Jersey client
jersey.java.net/project-
info/2.25.1/jersey/
25
Modules and dependencies
Security
project/oauth2-client/
dependencies.html]
26
Modules and dependencies
Jersey Examples
project-info/2.25.1/
jersey/project/webapp-
example-parent/
bookstore-webapp/
dependencies.html]
bundle [https:// OSGi HttpService example bundle
jersey.java.net/
project-info/2.25.1/
jersey/project/osgi-
http-service/bundle/
dependencies.html]
cdi-webapp [https:// Jersey CDI example.
jersey.java.net/
project-info/2.25.1/
jersey/project/
webapp-example-
parent/cdi-webapp/
dependencies.html]
clipboard [https:// Jersey clipboard example.
jersey.java.net/project-
info/2.25.1/jersey/
project/clipboard/
dependencies.html]
clipboard- Jersey programmatic resource API clipboard example.
programmatic [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/clipboard-
programmatic/
dependencies.html]
declarative-linking Declarative Hyperlinking - Jersey Sample
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
declarative-linking/
dependencies.html]
entity-filtering [https:// Jersey Entity Data Filtering Example.
jersey.java.net/project-
info/2.25.1/jersey/
project/entity-filtering/
dependencies.html]
entity-filtering-security Jersey Entity Data Filtering Security Example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/entity-
filtering-security/
dependencies.html]
entity-filtering- Jersey Entity Data Filtering Selectable Example.
selectable [https://
27
Modules and dependencies
Jersey Examples
jersey.java.net/
project-info/2.25.1/
jersey/project/entity-
filtering-selectable/
dependencies.html]
exception-mapping Jersey example showing exception mappers in action.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
exception-mapping/
dependencies.html]
extended-wadl-webapp Extended WADL example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
example-parent/
extended-wadl-webapp/
dependencies.html]
feed-combiner-java8- Jersey Web Application (Servlet) examples parent POM.
webapp [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/webapp-
example-parent/
feed-combiner-
java8-webapp/
dependencies.html]
flight-management- Jersey Flight Management Demo Web Application Example
webapp [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/webapp-
example-parent/flight-
management-webapp/
dependencies.html]
freemarker-webapp Jersey Freemarker example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
example-parent/
freemarker-webapp/
dependencies.html]
functional-test [https:// Jersey examples
jersey.java.net/project-
info/2.25.1/jersey/
project/osgi-helloworld-
webapp/functional-test/
dependencies.html]
28
Modules and dependencies
Jersey Examples
functional-test [https:// OSGi HttpService example
jersey.java.net/project-
info/2.25.1/jersey/
project/osgi-http-
service/functional-test/
dependencies.html]
groovy [https:// Groovy Jersey
jersey.java.net/project-
info/2.25.1/jersey/
project/groovy/
dependencies.html]
helloworld [https:// Jersey annotated resource class "Hello world" example.
jersey.java.net/project-
info/2.25.1/jersey/
project/helloworld/
dependencies.html]
helloworld-benchmark Jersey "Hello World" benchmark example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
helloworld-benchmark/
dependencies.html]
helloworld-netty Jersey "Hello world" example on Netty container.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
helloworld-netty/
dependencies.html]
helloworld- Jersey programmatic resource API "Hello world" example.
programmatic [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/helloworld-
programmatic/
dependencies.html]
helloworld-pure-jax-rs Example using only the standard JAX-RS API's and the lightweight HTTP server
[https://jersey.java.net/ bundled in JDK.
project-info/2.25.1/
jersey/project/
helloworld-pure-jax-rs/
dependencies.html]
helloworld-spring- Spring 3 Integration Jersey Example
annotations [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/helloworld-
spring-annotations/
dependencies.html]
29
Modules and dependencies
Jersey Examples
helloworld-spring- Spring 3 Integration Jersey Example
webapp [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/helloworld-
spring-webapp/
dependencies.html]
helloworld-webapp Jersey annotated resource class "Hello world" example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
example-parent/
helloworld-webapp/
dependencies.html]
helloworld-weld Jersey annotated resource class "Hello world" example with Weld support.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
helloworld-weld/
dependencies.html]
http-patch [https:// Jersey example for implementing generic PATCH support via JAX-RS reader interceptor.
jersey.java.net/project- Taken from Gerard Davison's blog entry: http://kingsfleet.blogspot.co.uk/2014/02/
info/2.25.1/jersey/ transparent-patch-support-in-jax-rs-20.html
project/http-patch/
dependencies.html]
http-trace [https:// Jersey HTTP TRACE support example.
jersey.java.net/project-
info/2.25.1/jersey/
project/http-trace/
dependencies.html]
https-clientserver- Jersey HTTPS Client/Server example on Grizzly.
grizzly [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/https-
clientserver-grizzly/
dependencies.html]
https-server-glassfish Jersey HTTPS server on GlassFish example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
example-parent/https-
server-glassfish/
dependencies.html]
java8-webapp [https:// Java 8 Types WebApp Example.
jersey.java.net/project-
info/2.25.1/jersey/
project/webapp-
example-parent/
30
Modules and dependencies
Jersey Examples
java8-webapp/
dependencies.html]
jaxb [https:// Jersey JAXB example.
jersey.java.net/
project-info/2.25.1/
jersey/project/jaxb/
dependencies.html]
jaxrs-types-injection Jersey JAX-RS types injection example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/jaxrs-
types-injection/
dependencies.html]
jersey-ejb [https:// Jersey Web Application (Servlet) examples parent POM.
jersey.java.net/project-
info/2.25.1/jersey/
project/webapp-
example-parent/jersey-
ejb/dependencies.html]
json-jackson [https:// Jersey JSON with Jackson example.
jersey.java.net/project-
info/2.25.1/jersey/
project/json-jackson/
dependencies.html]
json-jackson1 [https:// Jersey JSON with Jackson 1.x example.
jersey.java.net/project-
info/2.25.1/jersey/
project/json-jackson1/
dependencies.html]
json-jettison [https:// Jersey JSON with Jettison JAXB example.
jersey.java.net/project-
info/2.25.1/jersey/
project/json-jettison/
dependencies.html]
json-moxy [https:// Jersey JSON with MOXy example.
jersey.java.net/project-
info/2.25.1/jersey/
project/json-moxy/
dependencies.html]
json-processing- Jersey JSON-P (JSR 353) example.
webapp [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/webapp-
example-parent/json-
processing-webapp/
dependencies.html]
json-with-padding Jersey JSON with Padding example.
[https://jersey.java.net/
31
Modules and dependencies
Jersey Examples
project-info/2.25.1/
jersey/project/
json-with-padding/
dependencies.html]
lib-bundle [https:// OSGi Helloworld Webapp - lib bundle
jersey.java.net/project-
info/2.25.1/jersey/
project/osgi-helloworld-
webapp/lib-bundle/
dependencies.html]
managed-beans- Jersey Managed Beans Web Application Example.
webapp [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/
webapp-example-
parent/managed-
beans-webapp/
dependencies.html]
managed-client Jersey managed client example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
managed-client/
dependencies.html]
managed-client- Jersey Web Application (Servlet) examples parent POM.
simple-webapp [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/webapp-
example-parent/
managed-client-
simple-webapp/
dependencies.html]
managed-client- Jersey managed client web application example.
webapp [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/
webapp-example-
parent/managed-
client-webapp/
dependencies.html]
monitoring-webapp Jersey Web Application (Servlet) examples parent POM.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
example-parent/
monitoring-webapp/
dependencies.html]
32
Modules and dependencies
Jersey Examples
multipart-webapp Jersey Multipart example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
example-parent/
multipart-webapp/
dependencies.html]
oauth-client-twitter Twitter client using OAuth 1 support for Jersey that retrieves Tweets from the home
[https://jersey.java.net/ timeline of a registered Twitter account.
project-info/2.25.1/
jersey/project/
oauth-client-twitter/
dependencies.html]
oauth2-client-google- Google API data retrieving example using OAuth2 for authentication and authorization
webapp [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/oauth2-client-
google-webapp/
dependencies.html]
osgi-helloworld- Jersey examples
webapp [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/osgi-
helloworld-webapp/
dependencies.html]
osgi-http-service OSGi HttpService example
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
osgi-http-service/
dependencies.html]
reload [https:// Jersey resource configuration reload example.
jersey.java.net/
project-info/2.25.1/
jersey/project/reload/
dependencies.html]
rx-client-java8-webapp Jersey Reactive Client Extension (Java8) WebApp Example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
example-parent/rx-
client-java8-webapp/
dependencies.html]
rx-client-webapp Jersey Reactive Client Extension WebApp Example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
33
Modules and dependencies
Jersey Examples
example-parent/
rx-client-webapp/
dependencies.html]
server-async [https:// Jersey JAX-RS asynchronous server-side example.
jersey.java.net/project-
info/2.25.1/jersey/
project/server-async/
dependencies.html]
server-async-managed Jersey JAX-RS asynchronous server-side example with custom Jersey executor providers.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/server-
async-managed/
dependencies.html]
server-async- Standalone Jersey JAX-RS asynchronous server-side processing example.
standalone [https://
jersey.java.net/
project-info/2.25.1/
jersey/project/server-
async-standalone/
dependencies.html]
server-async- Standalone Jersey JAX-RS asynchronous server-side processing example client.
standalone-client
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/server-
async-standalone/
server-async-
standalone-client/
dependencies.html]
server-async- Standalone Jersey JAX-RS asynchronous server-side processing example web
standalone-webapp application.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/server-
async-standalone/
server-async-
standalone-webapp/
dependencies.html]
server-sent-events Jersey Server-Sent Events example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
server-sent-events/
dependencies.html]
servlet3-webapp Jersey Servlet 3 example with missing servlet-class in the web.xml file
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
34
Modules and dependencies
Jersey Examples
example-parent/
servlet3-webapp/
dependencies.html]
shortener-webapp Jersey Shortener Webapp (MVC + Bean Validation).
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
example-parent/
shortener-webapp/
dependencies.html]
simple-console Jersey Simple Console example
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/
simple-console/
dependencies.html]
sparklines [https:// Jersey examples
jersey.java.net/project-
info/2.25.1/jersey/
project/sparklines/
dependencies.html]
sse-item-store-webapp Jersey SSE-based item store example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/webapp-
example-parent/sse-
item-store-webapp/
dependencies.html]
sse-twitter-aggregator Jersey SSE Twitter Message Aggregator Example.
[https://jersey.java.net/
project-info/2.25.1/
jersey/project/sse-
twitter-aggregator/
dependencies.html]
system-properties- Jersey system properties example.
example [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/system-
properties-example/
dependencies.html]
tone-generator [https:// Jersey examples
jersey.java.net/project-
info/2.25.1/jersey/
project/tone-generator/
dependencies.html]
war-bundle [https:// OSGi Helloworld Webapp WAR bundle
jersey.java.net/project-
info/2.25.1/jersey/
35
Modules and dependencies
Jersey Examples
project/osgi-helloworld-
webapp/war-bundle/
dependencies.html]
webapp-example- Jersey Web Application (Servlet) examples parent POM.
parent [https://
jersey.java.net/project-
info/2.25.1/jersey/
project/webapp-
example-parent/
dependencies.html]
xml-moxy [https:// Jersey XML MOXy example.
jersey.java.net/project-
info/2.25.1/jersey/
project/xml-moxy/
dependencies.html]
36
Chapter 3. JAX-RS Application,
Resources and Sub-Resources
This chapter presents an overview of the core JAX-RS concepts - resources and sub-resources.
The JAX-RS 2.0.1 specification draft can be found online here [http://jcp.org/en/jsr/summary?id=339].
The following code example is a very simple example of a root resource class using JAX-RS annotations.
The example code shown here is from one of the samples that ships with Jersey, the zip file of which can
be found in the maven repository here [https://maven.java.net/content/repositories/releases/org/glassfish/
jersey/examples/helloworld/2.25.1/].
3.1.1. @Path
The @Path [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Path.html] annotation's value is
a relative URI path. In the example above, the Java class will be hosted at the URI path /helloworld.
37
JAX-RS Application,
Resources and Sub-Resources
URI path templates are URIs with variables embedded within the URI syntax. These variables are
substituted at runtime in order for a resource to respond to a request based on the substituted URI. Variables
are denoted by curly braces. For example, look at the following @Path [https://jersey.java.net/apidocs-
javax.jax-rs/2.0.1/javax/ws/rs/Path.html] annotation:
@Path("/users/{username}")
In this type of example, a user will be prompted to enter their name, and then a Jersey web service
configured to respond to requests to this URI path template will respond. For example, if the user
entered their username as "Galileo", the web service will respond to the following URL: http://
example.com/users/Galileo
If it is required that a user name must only consist of lower and upper case numeric characters then it is
possible to declare a particular regular expression, which overrides the default regular expression, "[^/]+",
for example:
@Path("users/{username: [a-zA-Z][a-zA-Z_0-9]*}")
In this type of example the username variable will only match user names that begin with one upper or
lower case letter and zero or more alpha numeric characters and the underscore character. If a user name
does not match that a 404 (Not Found) response will occur.
38
JAX-RS Application,
Resources and Sub-Resources
will process HTTP GET requests. The behavior of a resource is determined by which of the HTTP methods
the resource is responding to.
The following example is an extract from the storage service sample that shows the use of the PUT method
to create or update a storage container:
By default the JAX-RS runtime will automatically support the methods HEAD and OPTIONS, if not
explicitly implemented. For HEAD the runtime will invoke the implemented GET method (if present) and
ignore the response entity (if set). A response returned for the OPTIONS method depends on the requested
media type defined in the 'Accept' header. The OPTIONS method can return a response with a set of
supported resource methods in the 'Allow' header or return a WADL [http://wadl.java.net/] document. See
wadl section for more information.
3.1.3. @Produces
The @Produces [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Produces.html] annotation
is used to specify the MIME media types of representations a resource can produce and send
back to the client. In this example, the Java method will produce representations identified by the
MIME media type "text/plain". @Produces [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
Produces.html] can be applied at both the class and method levels. Here's an example:
39
JAX-RS Application,
Resources and Sub-Resources
13 }
14 }
The doGetAsPlainText method defaults to the MIME type of the @Produces [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Produces.html] annotation at the class level.
The doGetAsHtml method's @Produces [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
Produces.html] annotation overrides the class-level @Produces [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/Produces.html] setting, and specifies that the method can produce HTML rather than
plain text.
If a resource class is capable of producing more that one MIME media type then the resource method
chosen will correspond to the most acceptable media type as declared by the client. More specifically the
Accept header of the HTTP request declares what is most acceptable. For example if the Accept header
is "Accept: text/plain" then the doGetAsPlainText method will be invoked. Alternatively
if the Accept header is " Accept: text/plain;q=0.9, text/html", which declares that the
client can accept media types of "text/plain" and "text/html" but prefers the latter, then the doGetAsHtml
method will be invoked.
More than one media type may be declared in the same @Produces [https://jersey.java.net/apidocs-
javax.jax-rs/2.0.1/javax/ws/rs/Produces.html] declaration, for example:
The doGetAsXmlOrJson method will get invoked if either of the media types "application/xml" and
"application/json" are acceptable. If both are equally acceptable then the former will be chosen because
it occurs first.
Optionally, server can also specify the quality factor for individual media types. These are considered if
several are equally acceptable by the client. For example:
In the above sample, if client accepts both "application/xml" and "application/json" (equally), then a server
always sends "application/json", since "application/xml" has a lower quality factor.
The examples above refers explicitly to MIME media types for clarity. It is possible to refer to constant
values, which may reduce typographical errors, see the constant field values of MediaType [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/MediaType.html].
3.1.4. @Consumes
The @Consumes [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Consumes.html]
annotation is used to specify the MIME media types of representations that can be consumed by a resource.
The above example can be modified to set the cliched message as follows:
40
JAX-RS Application,
Resources and Sub-Resources
In this example, the Java method will consume representations identified by the MIME media type "text/
plain". Notice that the resource method returns void. This means no representation is returned and response
with a status code of 204 (No Content) will be returned to the client.
If a query parameter "step" exists in the query component of the request URI then the "step" value will be
extracted and parsed as a 32 bit signed integer and assigned to the step method parameter. If "step" does not
exist then a default value of 2, as declared in the @DefaultValue [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/DefaultValue.html] annotation, will be assigned to the step method parameter. If the
"step" value cannot be parsed as a 32 bit signed integer then a HTTP 404 (Not Found) response is returned.
User defined Java types such as ColorParam may be used, which as implemented as follows:
41
JAX-RS Application,
Resources and Sub-Resources
3 public ColorParam(String s) {
4 super(getRGB(s));
5 }
6
7 private static int getRGB(String s) {
8 if (s.charAt(0) == '#') {
9 try {
10 Color c = Color.decode("0x" + s.substring(1));
11 return c.getRGB();
12 } catch (NumberFormatException e) {
13 throw new WebApplicationException(400);
14 }
15 } else {
16 try {
17 Field f = Color.class.getField(s);
18 return ((Color)f.get(null)).getRGB();
19 } catch (Exception e) {
20 throw new WebApplicationException(400);
21 }
22 }
23 }
24 }
1. Be a primitive type;
Sometimes parameters may contain more than one value for the same name. If this is the case then types
in 5) may be used to obtain all values.
42
JAX-RS Application,
Resources and Sub-Resources
If it is necessary to obtain a general map of parameter name to values then, for query and path parameters
it is possible to do the following:
Example 3.11. Obtaining general map of URI path and/or query parameters
1 @GET
2 public String get(@Context UriInfo ui) {
3 MultivaluedMap<String, String> queryParams = ui.getQueryParameters();
4 MultivaluedMap<String, String> pathParams = ui.getPathParameters();
5 }
Because form parameters (unlike others) are part of the message entity, it is possible to do the following:
43
JAX-RS Application,
Resources and Sub-Resources
Example 3.14. Example of the bean which will be used as @BeanParam [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/BeanParam.html]
1 public class MyBeanParam {
2 @PathParam("p")
3 private String pathParam;
4
5 @MatrixParam("m")
6 @Encoded
7 @DefaultValue("default")
8 private String matrixParam;
9
10 @HeaderParam("header")
11 private String headerParam;
12
13 private String queryParam;
14
15 public MyBeanParam(@QueryParam("q") String queryParam) {
16 this.queryParam = queryParam;
17 }
18
19 public String getPathParam() {
20 return pathParam;
21 }
22 ...
23 }
44
JAX-RS Application,
Resources and Sub-Resources
3.3. Sub-resources
@Path [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Path.html] may be used on classes
and such classes are referred to as root resource classes. @Path [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/Path.html] may also be used on methods of root resource classes. This enables
common functionality for a number of resources to be grouped together and potentially reused.
45
JAX-RS Application,
Resources and Sub-Resources
18 @Produces("application/json")
19 public TreeModel getTree() { ... }
20
21 @GET @Path("/ids/{printerid}")
22 @Produces({"application/json", "application/xml"})
23 public Printer getPrinter(@PathParam("printerid") String printerId) { ... }
24
25 @PUT @Path("/ids/{printerid}")
26 @Consumes({"application/json", "application/xml"})
27 public void putPrinter(@PathParam("printerid") String printerId, Printer pr
28
29 @DELETE @Path("/ids/{printerid}")
30 public void deletePrinter(@PathParam("printerid") String printerId) { ... }
31 }
If the path of the request URL is "printers" then the resource methods not annotated with @Path
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Path.html] will be selected. If the request
path of the request URL is "printers/list" then first the root resource class will be matched and then
the sub-resource methods that match "list" will be selected, which in this case is the sub-resource
methodgetListOfPrinters. So, in this example hierarchical matching on the path of the request
URL is performed.
46
JAX-RS Application,
Resources and Sub-Resources
The root resource class ItemResource contains the sub-resource locator method
getItemContentResource that returns a new resource class. If the path of the request URL
is "item/content" then first of all the root resource will be matched, then the sub-resource locator
will be matched and invoked, which returns an instance of the ItemContentResource resource
class. Sub-resource locators enable reuse of resource classes. A method can be annotated with the
@Path [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Path.html] annotation with empty
path (@Path("/") or @Path("")) which means that the sub resource locator is matched for the path
of the enclosing resource (without sub-resource path).
In the example above the sub-resource locator method getItemContentResource is matched for
example for request path "/item/locator" or even for only "/item".
In addition the processing of resource classes returned by sub-resource locators is performed at runtime
thus it is possible to support polymorphism. A sub-resource locator may return different sub-types
depending on the request (for example a sub-resource locator could return different sub-types dependent
on the role of the principle that is authenticated). So for example the following sub resource locator is valid:
Note that the runtime will not manage the life-cycle or perform any field injection onto instances returned
from sub-resource locator methods. This is because the runtime does not know what the life-cycle of the
instance is. If it is required that the runtime manages the sub-resources as standard resources the Class
should be returned as shown in the following example:
47
JAX-RS Application,
Resources and Sub-Resources
JAX-RS resources are managed in per-request scope by default which means that new resource is created
for each request. In this example the javax.inject.Singleton annotation says that the resource
will be managed as singleton and not in request scope. The sub-resource locator method returns a class
which means that the runtime will managed the resource instance and its life-cycle. If the method would
return instance instead, the Singleton annotation would have no effect and the returned instance would
be used.
The sub resource locator can also return a programmatic resource model. See resource builder section for
information of how the programmatic resource model is constructed. The following example shows very
simple resource returned from the sub-resource locator method.
The code above has exactly the same effect as previous example. Resource is a resource simple resource
constructed from ItemContentSingletonResource. More complex programmatic resource can
be returned as long they are valid resources.
In general this is unlikely to be a cause of performance issues. Class construction and garbage collection
of JVMs has vastly improved over the years and many objects will be created and discarded to serve and
process the HTTP request and return the HTTP response.
Instances of singleton root resource classes can be declared by an instance of Application [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Application.html].
48
JAX-RS Application,
Resources and Sub-Resources
This section presents the rules of injection of values on annotated types. Injection can be performed on
fields, constructor parameters, resource/sub-resource/sub-resource locator method parameters and bean
setter methods. The following presents an example of all such injection cases:
49
JAX-RS Application,
Resources and Sub-Resources
15 @Path("sub-id")
16 @GET
17 public String get(@PathParam("sub-id") String id) { ... }
18
19 // Injection onto sub-resource locator method parameter
20 @Path("sub-id")
21 public SubResource getSubResource(@PathParam("sub-id") String id) { ... }
22
23 // Injection using bean setter method
24 @HeaderParam("X-header")
25 public void setHeader(String header) { ... }
26 }
There are some restrictions when injecting on to resource classes with a life-cycle of singleton scope. In
such cases the class fields or constructor parameters cannot be injected with request specific parameters.
So, for example the following is not allowed.
The example above will cause validation failure during application initialization as singleton resources
cannot inject request specific parameters. The same example would fail if the query parameter would be
injected into constructor parameter of such a singleton. In other words, if you wish one resource instance
to server more requests (in the same time) it cannot be bound to a specific request parameter.
The exception exists for specific request objects which can injected even into constructor or class fields.
For these objects the runtime will inject proxies which are able to simultaneously server more request.
These request objects are HttpHeaders, Request, UriInfo, SecurityContext. These proxies
can be injected using the @Context [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
Context.html] annotation. The following example shows injection of proxies into the singleton resource
class.
50
JAX-RS Application,
Resources and Sub-Resources
The following example shows all possible java constructs into which the values can be injected.
51
JAX-RS Application,
Resources and Sub-Resources
16 return SubResource.class;
17 }
18
19 public SummaryOfInjectionsResource(@QueryParam("query") String constructorQ
20 // injection into a constructor parameter
21 }
22
23
24 @Context
25 public void setRequest(Request request) {
26 // injection into a setter method
27 System.out.println(request != null);
28 }
29 }
30
31 public static class SubResource {
32 @GET
33 public String get() {
34 return "sub resource";
35 }
36 }
52
Chapter 4. Application Deployment and
Runtime Environments
4.1. Introduction
This chapter is an overview of various server-side environments currently capable of running JAX-RS
applications on top of Jersey server runtime. Jersey supports wide range of server environments from
lightweight http containers up to full-fledged Java EE servers. Jersey applications can also run in an OSGi
runtime. The way how the application is published depends on whether the application shall run in a Java
SE environment or within a container.
Note
This chapter is focused on server-side Jersey deployment models. The Jersey client runtime does
not have any specific container requirements and runs in plain Java SE 6 or higher runtime.
Note
Package scanning ignores an inheritance and therefore @Path annotation on parent classes and
interfaces will be ignored. These classes won't be registered as the JAX-RS component classes.
53
Application Deployment
and Runtime Environments
Note
Later in this chapter, the term Application subclass is frequently used. Whenever used, this
term refers to the JAX-RS Application Model explained above.
• jersey-media-json-processing
• jersey-bean-validation
Besides these modules there are also few features/providers present in jersey-server module that
are discovered by this mechanism and their availability is affected by Jersey auto-discovery support
configuration (see Section 4.3.1, “Configuring Feature Auto-discovery Mechanism”), namely:
• WadlFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/wadl/
WadlFeature.html] - enables WADL processing.
• UriConnegFilter [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/filter/
UriConnegFilter.html] - a URI-based content negotiation filter.
Note
Auto discovery functionality is in Jersey supported by implementing an internal
AutoDiscoverable Jersey SPI. This interface is not public at the moment, and is subject to
change in the future, so be careful when trying to use it.
54
Application Deployment
and Runtime Environments
• CommonProperties.JSON_PROCESSING_FEATURE_DISABLE [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/
CommonProperties.html#JSON_PROCESSING_FEATURE_DISABLE]
• CommonProperties.MOXY_JSON_FEATURE_DISABLE [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/CommonProperties.html#MOXY_JSON_FEATURE_DISABLE]
For each of these properties there is a client/server counter-part that is only honored by the Jersey
client or server runtime respectively (see ClientProperties [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/client/ClientProperties.html]/ServerProperties [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/server/ServerProperties.html]). When set, each of these client/server specific
auto-discovery related properties overrides the value of the related common property.
Note
In case an auto-discoverable mechanism (in general or for a specific feature) is disabled, then
all the features, components and/or properties, registered by default using the auto-discovery
mechanism have to be registered manually.
• ForcedAutoDiscoverable (server, client) - Jersey always looks for these auto discoverable
features even if the service loading is disabled
• ComponentProvider (server)
• ContainerProvider (server)
• AsyncContextDelegateProvider (server/Servlet)
55
Application Deployment
and Runtime Environments
Since it is possible to configure all SPI implementation classes or instances manually in your
Application subclass, disabling services lookup in Jersey does not affect any functionality of Jersey
core modules and extensions and can save dozens of ms during application initialization in exchange for
a more verbose application configuration code.
For example, following code snippet disables service provider lookup and
manually registers implementations of different JAX-RS and Jersey provider
types (ContainerRequestFilter [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/container/
ContainerRequestFilter.html], Feature [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
Feature.html], ComponentProvider [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
server/spi/ComponentProvider.html] and ContainerProvider [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/server/spi/ContainerProvider.html]):
Similarly, in scenarios where the deployment model requires extending the Application subclass (e.g.
in all Servlet container deployments), the following code could be used to achieve the same application
configuration:
56
Application Deployment
and Runtime Environments
6 register(org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainerP
7 property(ServerProperties.METAINF_SERVICES_LOOKUP_DISABLE, true);
8 }
9 }
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-jdk-http</artifactId>
<version>2.25.1</version>
</dependency>
57
Application Deployment
and Runtime Environments
application resources and providers. However, since Grizzly Request is not proxiable, the injection
of Grizzly Request into singleton (by default) JAX-RS / Jersey providers is only possible via
javax.inject.Provider instance. (Grizzly Response does not suffer the same restriction.)
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-grizzly2-http</artifactId>
<version>2.25.1</version>
</dependency>
Note
Jersey uses Grizzly extensively in the project unit and end-to-end tests via test framework.
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-simple-http</artifactId>
<version>2.25.1</version>
</dependency>
Note
Simple framework HTTP container does not support deployment on context paths other than root
path ("/"). Non-root context path is ignored during deployment.
58
Application Deployment
and Runtime Environments
when using a Servlet-based deployment model, which is extensively described later in our Section 4.7,
“Servlet-based Deployment” section. We will here only focus on describing how to use Jetty's HTTP
server.
1 <dependency>
2 <groupId>org.glassfish.jersey.containers</groupId>
3 <artifactId>jersey-container-jetty-http</artifactId>
4 <version>2.25.1</version>
5 </dependency>
Note
Jetty HTTP container does not support deployment on context paths other than root path ("/").
Non-root context path is ignored during deployment.
1 <dependency>
2 <groupId>org.glassfish.jersey.containers</groupId>
3 <artifactId>jersey-container-netty-http</artifactId>
4 <version>2.25.1</version>
5 </dependency>
Note
Netty HTTP container does not support deployment on context paths other than root path ("/").
Non-root context path is ignored during deployment.
59
Application Deployment
and Runtime Environments
Once the Grizzly HttpHandler endpoint is created, it can be used for in-process deployment to a specific
base URL.
In Servlet 2.5 environment, you have to explicitly declare the Jersey container Servlet in your Web
application's web.xml deployment descriptor file.
60
Application Deployment
and Runtime Environments
4 <filter-class>org.glassfish.jersey.servlet.ServletContainer</filter-cla
5 <init-param>
6 ...
7 </init-param>
8 </filter>
9 ...
10 <filter-mapping>
11 <filter-name>MyApplication</filter-name>
12 <url-pattern>/myApp/*</url-pattern>
13 </filter-mapping>
14 ...
15 </web-app>
Important
Servlet 2.x API does not provide a way how to programmatically read the filter mappings.
To make application deployed using filter work correctly, either Servlet 3.x container must
be used (jersey-container-servlet instead of jersey-container-servlet-
core), or the context path of the app needs to be defined using init parameter
jersey.config.servlet.filter.contextPath.
The content of the <init-param> element will vary depending on the way you decide to configure
Jersey resources.
Jersey will consider all the classes returned by getClasses() and getSingletons() methods of
your Application implementation.
Note
The name of the configuration property as defined by JAX-RS specification is indeed
javax.ws.rs.Application and not javax.ws.rs.core.Application as one
might expect.
61
Application Deployment
and Runtime Environments
Jersey will automatically discover the resources and providers in the selected packages. You
can also decide whether Jersey should recursively scan also sub-packages by setting the
jersey.config.server.provider.scanning.recursive property. The default value is
true, i.e. the recursive scanning of sub-packages is enabled.
Example 4.14. Configuring Jersey container Servlet or Filter to use a list of classes
1 <init-param>
2 <param-name>jersey.config.server.provider.classnames</param-name>
3 <param-value>
4 org.foo.myresources.MyDogResource,
5 org.bar.otherresources.MyCatResource
6 </param-value>
7 </init-param>
Note
All of the techniques that have been described in this section also apply to Servlet containers
that support Servlet API 3.0 and later specification. Newer Servlet specifications only give you
additional features, deployment options and more flexibility.
62
Application Deployment
and Runtime Environments
Note
There are many other convenience methods in the ResourceConfig that can be
used in the constructor of your custom subclass to configure your JAX-RS application,
see ResourceConfig [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
ResourceConfig.html] API documentation for more details.
In case you are not providing web.xml deployment descriptor for your maven-based web
application project, you need to configure your maven-war-plugin to ignore the missing
web.xml file by setting failOnMissingWebXml [http://maven.apache.org/plugins/maven-war-plugin/
war-mojo.html#failOnMissingWebXml] configuration property to false in your project pom.xml file:
63
Application Deployment
and Runtime Environments
2 <servlet>
3 <servlet-name>org.foo.rest.MyApplication</servlet-name>
4 </servlet>
5 ...
6 <servlet-mapping>
7 <servlet-name>org.foo.rest.MyApplication</servlet-name>
8 <url-pattern>/resources</url-pattern>
9 </servlet-mapping>
10 ...
11 </web-app>
Note that the <servlet-class> element is omitted from the Servlet declaration. This is a correct
declaration utilizing the Servlet 3.0 extension mechanism described in detail in the Section 4.7.2.3, “Servlet
Pluggability Mechanism” section. Also note that <servlet-mapping> is used in the example to define
the base resource URI.
Tip
When running in a Servlet 2.x it would instead be necessary to declare the Jersey container Servlet
or Filter and pass the Application implementation class name as one of the init-param
entries, as described in Section 4.7.1, “Servlet 2.x Container”.
64
Application Deployment
and Runtime Environments
9 </servlet>
10
11 <servlet-mapping>
12 <servlet-name>javax.ws.rs.core.Application</servlet-name>
13 <url-pattern>/myresources/*</url-pattern>
14 </servlet-mapping>
15 </web-app>
If no such Servlet is defined to handle the custom Application subclass, Jersey dynamically
adds a Servlet with a fully qualified name equal to the name of the provided Application
subclass. To define the mapping for the added Servlet, you can either annotate the custom
Application subclass with an @ApplicationPath [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/ApplicationPath.html] annotation (Jersey will use the annotation value appended with /* to
automatically define the mapping for the Servlet), or specify the mapping for the Servlet in the web.xml
descriptor directly.
In the following example, let's assume that the JAX-RS application is defined using a custom
Application subclass named org.example.MyApplication. Then the web.xml file could
have the following structure:
Example 4.19.
1 <web-app version="3.0"
2 xmlns="http://java.sun.com/xml/ns/javaee"
3 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
4
5 <!-- Servlet declaration can be omitted in which case
6 it would be automatically added by Jersey -->
7 <servlet>
8 <servlet-name>org.example.MyApplication</servlet-name>
9 </servlet>
10
11 <!-- Servlet mapping can be omitted in case the Application subclass
12 is annotated with @ApplicationPath annotation; in such case
13 the mapping would be automatically added by Jersey -->
14 <servlet-mapping>
15 <servlet-name>org.example.MyApplication</servlet-name>
16 <url-pattern>/myresources/*</url-pattern>
17 </servlet-mapping>
18 </web-app>
Note
If your custom Application subclass is packaged in the war, it defines which resources will
be taken into account.
65
Application Deployment
and Runtime Environments
When deploying to a Servlet container, Jersey application is typically packaged as a .war file. As with
any other Servlet application, JAX-RS application classes are packaged in WEB-INF/classes or WEB-
INF/lib and required application libraries are located in WEB-INF/lib. For more details, please refer
to the Servlet Specification (JSR 315 [http://jcp.org/en/jsr/detail?id=315]).
Jersey provides two Servlet modules. The first module is the Jersey core Servlet module that provides the
core Servlet integration support and is required in any Servlet 2.5 or higher container:
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-servlet-core</artifactId>
</dependency>
To support additional Servlet 3.x deployment modes and asynchronous JAX-RS resource programming
model, an additional Jersey module is required:
<dependency>
<groupId>org.glassfish.jersey.containers</groupId>
<artifactId>jersey-container-servlet</artifactId>
</dependency>
66
Application Deployment
and Runtime Environments
Note that in simple cases, you don't need to provide the deployment descriptor (web.xml) and can use
the @ApplicationPath annotation, as described in Section 4.7.2.3.1, “JAX-RS application without
an Application subclass” section.
In the code below, you can find an example of a bean, that uses a managed-bean interceptor defined as a
JAX-RS bean. The bean is used to intercept calls to the resource method getIt():
1 @ManagedBean
2 @Path("/managedbean")
3 public class ManagedBeanResource {
4
5 public static class MyInterceptor {
6 @AroundInvoke
7 public String around(InvocationContext ctx) throws Exception {
8 System.out.println("around() called");
9 return (String) ctx.proceed();
10 }
11 }
12
13 @GET
14 @Produces("text/plain")
15 @Interceptors(MyInterceptor.class)
16 public String getIt() {
17 return "Hi managed bean!";
18 }
19 }
The next example shows a usage of a CDI bean as a JAX-RS root resource class. We assume, that CDI
has been enabled. The code snipped uses the type-safe dependency injection provided in CDI by using
another bean (MyOtherCdiBean):
1 @Path("/cdibean")
2 public class CdiBeanResource {
3 @Inject MyOtherCdiBean bean; // CDI injected bean
4
5 @GET
6 @Produces("text/plain")
67
Application Deployment
and Runtime Environments
The above works naturally inside any Java EE compliant AS container. In Jersey version 2.15, container
agnostic CDI support was introduced. This feature allows you to publish CDI based JAX-RS resources
also in other containers. Jersey cdi-webapp example shows Jersey/CDI integration in Grizzly HTTP and
Apache Tomcat server. Detailed description of Jersey CDI support outside of a fully fledged Java EE
application container could be found in Chapter 24, Jersey CDI Container Agnostic Support.
Following example consists of a stateless EJB and a local interface used in Jersey:
1 @Local
2 public interface LocalEjb {
3 @GET
4 @Produces("text/plain")
5 public String getIt();
6 }
7
8 @Stateless
9 @Path("/stateless")
10 public class StatelessEjbResource implements LocalEjb {
11 @Override
12 public String getIt() {
13 return "Hi Stateless!";
14 }
15 }
Note
Please note that Jersey currently does not support deployment of JAX-RS applications packaged
as standalone EJB modules (ejb-jars). To use EJBs as JAX-RS resources, the EJBs need to be
packaged either directly in a WAR or in an EAR that contains at least one WAR. This is to ensure
Servlet container initialization that is necessary for bootstrapping of the Jersey runtime.
68
Application Deployment
and Runtime Environments
Started with version 2.7, Jersey allows injecting Jersey specific types into CDI enabled JAX-RS
components using the @javax.inject.Inject annotation. This covers also custom HK2 bindings,
that are configured as part of Jersey application. The feature specifically enables usage of Jersey monitoring
statistics (provided that the statistic feature is turned on) in CDI environment, where injection is the only
mean to get access to monitoring data.
Since both CDI and HK2 use the same injection annotation, Jersey could get confused
in certain cases, which could lead to nasty runtime issues. The get better control
over what Jersey evaluates as HK2 injection, end-users could take advantage of newly
introduced, Hk2CustomBoundTypesProvider [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/ext/cdi1x/spi/Hk2CustomBoundTypesProvider.html], SPI. Please see the linked javadoc to get
detailed information on how to use the SPI in your application.
In WebLogic 12.1.3, Jersey 1.18 is shipped as a default JAX-RS 1.1 provider. In this version of
WebLogic, JAX-RS 2.0 (using Jersey 2.5.1) is supported as an optionally installable shared library. Please
read through the WebLogic 12.1.3 RESTful Web Services Development Guide [http://docs.oracle.com/
middleware/1213/wls/RESTF/use-jersey20-ri.htm#RESTF290] for details how to enable JAX-RS 2.0
support on WebLogic 12.1.3.
In general, Jersey will be deployed as a Servlet and the resources can be deployed in various ways, as
described in this section. However, the exact steps will vary from vendor to vendor.
4.9. OSGi
OSGi support has been added to the Jersey version 1.2. Since then, you should be able to utilize standard
OSGi means to run Jersey based web applications in OSGi runtime as described in the OSGi Service
Platform Enterprise Specification. Jersey is currently compatible with OSGi 4.2.0, the specification could
be downloaded from the OSGi 4.2.0 Download Site [http://www.osgi.org/Download/Release4V42].
• HTTP Service
WAB is in fact just an OSGified WAR archive. HTTP Service feature allows you to publish Java EE
Servlets in the OSGi runtime.
Two examples were added to the Jersey distribution to depict the above mentioned features and show how
to use them with Jersey:
69
Application Deployment
and Runtime Environments
Both examples are multi-module maven projects and both consist of an application OSGi bundle
module and a test module. The tests are based on the PAX Exam [http://ops4j1.jira.com/wiki/display/
PAXEXAM3/Pax+Exam] framework. Both OSGi examples also include a readme file containing
instructions how to manually run the example applications using Apache Felix [http://felix.apache.org/
site/index.html] framework.
The rest of the chapter describes how to run the above mentioned examples on GlassFish 4 application
server.
Example 4.20.
Start the admin console:
1
2 ~/glassfish/bin$ ./asadmin
3 Use "exit" to exit and "help" for online help.
4 asadmin>
You can check the actual value of the java property (loaded from the configuration file):
26
27 asadmin> list-jvm-options
28 ...
29 -Dglassfish.osgi.start.level.final=2
30 ...
26
27 asadmin> create-jvm-options --target server -Dglassfish.osgi.start.level.final
The second option is to change the value in the osgi.properties configuration file:
1
2 # Final start level of OSGi framework. This is used by GlassFish launcher code
3 # to set the start level of the OSGi framework once server is up and running so
4 # optional services can start. The initial start level of framework is controll
5 # the standard framework property called org.osgi.framework.startlevel.beginnin
6 glassfish.osgi.start.level.final=3
You can then execute the Felix shell commands by typing osgi <felix_command> in the asadmin
console. For example:
1
2 asadmin> osgi lb
3 ... list of bundles ...
70
Application Deployment
and Runtime Environments
or launching the shell using osgi-shell command in the admin console (the domain must be started,
otherwise the osgi shell won't launch):
1
2 asadmin> osgi-shell
3 Use "exit" to exit and "help" for online help.
4 gogo$
and execute the osgi commands directly (without the "osgi" prefix):
1
2 gogo$ lb
3 ... list of bundles ...
1 Web-ContextPath: helloworld
2 Webapp-Context: helloworld
3 Bundle-ClassPath: WEB-INF/classese
Here, the second header is ignored by GlassFish, but may be required by other containers not fully
compliant with the OSGi Enterprise Specification mentioned above. The third manifest header worth
mentioning is the Bundle-ClassPath specifying where to find the application Java classes within the bundle
archive. More about manifest headers in OSGi can be found in the OSGi Wiki [http://wiki.osgi.org/wiki/
Category:Manifest_Header].
For more detailed information on the example please see the WAB Example [https://github.com/jersey/
jersey/tree/2.25.1/examples/osgi-helloworld-webapp] source code. This example does not package into a
single war file. Instead a war and a set of additional jars is produced during the build. See the next
example to see how to deploy OSGi based Jersey application to GlassFish.
You can directly install and activate the Jersey application bundle. In case of our example, you can either
install the example bundle stored locally (and alternatively build from Jersey sources):
1) Build (optional)
1
2 examples$ cd osgi-http-service/bundle
3 bundle$ mvn clean package
You can also get the binary readily compiled from Java.net Maven Repository [https://maven.java.net/
content/repositories/releases/org/glassfish/jersey/examples/osgi-http-service/bundle/2.25.1].
71
Application Deployment
and Runtime Environments
1
2 gogo$ install file:///path/to/file/bundle.jar
3 Bundle ID: 303
1
2 gogo$ install http://maven.java.net/content/repositories/releases/org/glassfish
3 Bundle ID: 303
Make sure to replace <version> with an appropriate version number. Which one is appropriate depends
on the specific GlassFish 4.x version you are using. The version of the bundle cannot be higher than the
version of Jersey integrated in your GlassFish 4.x server. Jersey bundles declare dependencies on other
bundles at the OSGi level and those dependencies are version-sensitive. If you use example bundle from
let's say version 2.5, but Glassfish has Jersey 2.3.1, dependencies will not be satisfied and bundle will not
start. If this happens, the error will look something like this:
1 gogo$ lb
2 ...
3 303 | Installed | 1| jersey-examples-osgi-http-service-bundle (2.5.0.SNAPSH
4 gogo$ start 303
5
6 org.osgi.framework.BundleException: Unresolved constraint in bundle
7 org.glassfish.jersey.examples.osgi-http-service.bundle [303]: Unable to resolve
8 [303.0] osgi.wiring.package; (&(osgi.wiring.package=org.glassfish.jersey.servle
9 (version>=2.5.0)(!(version>=3.0.0)))
10
11 gogo$
In the opposite scenario (example bundle version 2.3.1 and Glassfish Jersey version higher), everything
should work fine.
Also, if you build GlassFish from the main trunk sources and use the example from most recent Jersey
release, you will most likely be able to run the examples from the latest Jersey release, as Jersey team
typically integrates all newly released versions of Jersey immediately into GlassFish.
Again, the Bundle ID (in our case 303) has to be replaced by the correct one returned from the install
command.
The example app should now be up and running. You can access it on http://localhost:8080/osgi/
jersey-http-service/status [http://localhost:8080/osgi/jersey-http-service/status]. Please see HTTP Service
example [https://github.com/jersey/jersey/tree/2.25.1/examples/osgi-http-service] source code for more
details on the example.
72
Application Deployment
and Runtime Environments
73
Chapter 5. Client API
This section introduces the JAX-RS Client API, which is a fluent Java based API for communication
with RESTful Web services. This standard API that is also part of Java EE 7 is designed to make it very
easy to consume a Web service exposed via HTTP protocol and enables developers to concisely and
efficiently implement portable client-side solutions that leverage existing and well established client-side
HTTP connector implementations.
The JAX-RS client API can be utilized to consume any Web service exposed on top of a HTTP protocol or
it's extension (e.g. WebDAV), and is not restricted to services implemented using JAX-RS. Yet, developers
familiar with JAX-RS should find the client API complementary to their services, especially if the client
API is utilized by those services themselves, or to test those services. The JAX-RS client API finds
inspiration in the proprietary Jersey 1.x Client API and developers familiar with the Jersey 1.x Client API
should find it easy to understand all the concepts introduced in the new JAX-RS Client API.
1. Encapsulate a key constraint of the REST architectural style, namely the Uniform Interface Constraint
and associated data elements, as client-side Java artifacts;
2. Make it as easy to consume RESTful Web services exposed over HTTP, same as the JAX-RS server-
side API makes it easy to develop RESTful Web services; and
3. Share common concepts and extensibility points of the JAX-RS API between the server and the client
side programming models.
As an extension to the standard JAX-RS Client API, the Jersey Client API supports a pluggable architecture
to enable the use of different underlying HTTP client Connector [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/client/spi/Connector.html] implementations. Several such implementations are
currently provided with Jersey. We have a default client connector using Http(s)URLConnection
supplied with the JDK as well as connector implementations based on Apache HTTP Client, Jetty HTTP
client and Grizzly Asynchronous Client.
2. evolvability or loose coupling, clients and services can evolve over time perhaps in new and unexpected
ways, while retaining backwards compatibility.
2. a client interacts with the resource via HTTP requests and responses using a fixed set of HTTP methods;
3. one or more representations can be returned and are identified by media types; and
74
Client API
The above process repeated over and again should be familiar to anyone who has used a browser to fill in
HTML forms and follow links. That same process is applicable to non-browser based clients.
Many existing Java-based client APIs, such as the Apache HTTP client API or HttpUrlConnection
supplied with the JDK place too much focus on the Client-Server constraint for the exchanges of request
and responses rather than a resource, identified by a URI, and the use of a fixed set of HTTP methods.
A resource in the JAX-RS client API is an instance of the Java class WebTarget [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/WebTarget.html]. and encapsulates an URI. The fixed set of
HTTP methods can be invoked based on the WebTarget. The representations are Java types, instances
of which, may contain links that new instances of WebTarget may be created from.
2. Built-in support for Java types of representations such as byte[], String, Number, Boolean,
Character, InputStream, java.io.Reader, File, DataSource, JAXB beans as well
as additional Jersey-specific JSON and Multi Part [https://jersey.java.net/apidocs/2.25.1/jersey/org/
glassfish/jersey/media/multipart/package-summary.html] support.
3. Using the fluent builder-style API pattern to make it easier to construct requests.
75
Client API
In the Example 5.1, “POST request with form parameters” a new WebTarget instance is created using a
new Client [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/Client.html] instance first,
next a Form [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Form.html] instance is
created with two form parameters. Once ready, the Form instance is POSTed to the target resource. First,
the acceptable media type is specified in the request(...) method. Then in the post(...) method,
a call to a static method on JAX-RS Entity [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
client/Entity.html] is made to construct the request entity instance and attach the proper content media
type to the form entity that is being sent. The second parameter in the post(...) method specifies the
Java type of the response entity that should be returned from the method in case of a successful response.
In this case an instance of JAXB bean is requested to be returned on success. The Jersey client API takes
care of selecting the proper MessageBodyWriter<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/ext/MessageBodyWriter.html] for the serialization of the Form instance, invoking the POST
request and producing and de-serialization of the response message payload into an instance of a JAXB
bean using a proper MessageBodyReader<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/
rs/ext/MessageBodyReader.html].
If the code above had to be written using HttpUrlConnection, the developer would have to write
custom code to serialize the form data that are sent within the POST request and de-serialize the response
input stream into a JAXB bean. Additionally, more code would have to be written to make it easy to reuse
the logic when communicating with the same resource “http://localhost:8080/resource”
that is represented by the JAX-RS WebTarget instance in our example.
The ClientBuilder is a JAX-RS API used to create new instances of Client. In a slightly more
advanced scenarios, ClientBuilder can be used to configure additional client instance properties,
such as a SSL transport settings, if needed (see ??? below).
76
Client API
In the example, filters are registered using the ClientConfig.register(...) method. There are
multiple overloaded versions of the method that support registration of feature and provider classes or
instances. Once a ClientConfig instance is configured, it can be passed to the ClientBuilder to
create a pre-configured Client instance.
Note that the Jersey ClientConfig supports the fluent API model of Configurable [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Configurable.html]. With that the code that
configures a new client instance can be also written using a more compact style as shown below.
1
2 Client client = ClientBuilder.newClient(new ClientConfig()
3 .register(MyClientResponseFilter.class)
4 .register(new AnotherClientFilter());
The ability to leverage this compact pattern is inherent to all JAX-RS and Jersey Client API components.
1 client.register(ThirdClientFilter.class);
Similarly to earlier examples, since Client.register(...) method supports the fluent API style,
multiple client instance configuration calls can be chained:
1 client.register(FilterA.class)
2 .register(new FilterB())
3 .property("my-property", true);
To get the current configuration of the Client instance a getConfiguration() method can be used.
77
Client API
does not influence the configuration represented by the original clientConfig. In the last step a
newConfiguration is retrieved from the client. This configuration contains all three registered
filters while the original clientConfig instance still contains only two filters. Unlike clientConfig
created separately, the newConfiguration retrieved from the client instance represents a live client
configuration view. Any additional configuration changes made to the client instance are also reflected
in the newConfiguration. So, newConfiguration is really a view of the client configuration
and not a configuration state copy. These principles are important in the client API and will be used in
the following sections too. For example, you can construct a common base configuration for all clients (in
our case it would be clientConfig) and then reuse this common configuration instance to configure
multiple client instances that can be further specialized. Similarly, you can use an existing client
instance configuration to configure another client instance without having to worry about any side effects
in the original client instance.
A Client contains several target(...) methods that allow for creation of WebTarget instance.
In this case we're using target(String uri) version. The uri passed to the method as a String
is the URI of the targeted web resource. In more complex scenarios it could be the context root URI
of the whole RESTful application, from which WebTarget instances representing individual resource
targets can be derived and individually configured. This is possible, because JAX-RS WebTarget also
implements Configurable:
The configuration principles used in JAX-RS client API apply to WebTarget as well. Each WebTarget
instance inherits a configuration from it's parent (either a client or another web target) and can be
further custom-configured without affecting the configuration of the parent component. In this case, the
FilterForExampleCom will be registered only in the webTarget and not in client. So, the
client can still be used to create new WebTarget instances pointing at other URIs using just the
common client configuration, which FilterForExampleCom filter is not part of.
78
Client API
Let's assume that the helloworld resource accepts a query param for GET requests which defines the
greeting message. The next code snippet shows a code that creates a new WebTarget with the query
param defined.
1 WebTarget helloworldWebTargetWithQueryParam =
2 helloworldWebTarget.queryParam("greeting", "Hi World!");
Please note that apart from methods that can derive new WebTarget instance based on a URI path
or query parameters, the JAX-RS WebTarget API contains also methods for working with matrix
parameters too.
1 Invocation.Builder invocationBuilder =
2 helloworldWebTargetWithQueryParam.request(MediaType.TEXT_PLAIN_TYPE);
3 invocationBuilder.header("some-header", "true");
A new invocation builder instance is created using one of the request(...) methods that are available
on WebTarget. A couple of these methods accept parameters that let you define the media type of the
representation requested to be returned from the resource. Here we are saying that we request a "text/
plain" type. This tells Jersey to add a Accept: text/plain HTTP header to our request.
The invocationBuilder is used to setup request specific parameters. Here we can setup headers for
the request or for example cookie parameters. In our example we set up a "some-header" header to
value true.
Once finished with request customizations, it's time to invoke the request. We have two options
now. We can use the Invocation.Builder to build a generic Invocation [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/Invocation.html] instance that will be invoked some time
later. Using Invocation we will be able to e.g. set additional request properties which are
properties in a batch of several requests and use the generic JAX-RS Invocation API to
invoke the batch of requests without actually knowing all the details (such as request HTTP
method, configuration etc.). Any properties set on an invocation instance can be read during the
request processing. For example, in a custom ClientRequestFilter [https://jersey.java.net/apidocs-
javax.jax-rs/2.0.1/javax/ws/rs/client/ClientRequestFilter.html] you can call getProperty() method on
the supplied ClientRequestContext [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/
ClientRequestContext.html] to read a request property. Note that these request properties are different
from the configuration properties set on Configurable. As mentioned earlier, an Invocation
instance provides generic invocation API to invoke the HTTP request it represents either synchronously
or asynchronously. See the Chapter 11, Asynchronous Services and Clients for more information on
asynchronous invocations.
In case you do not want to do any batch processing on your HTTP request invocations prior to invoking
them, there is another, more convenient approach that you can use to invoke your requests directly from
an Invocation.Builder instance. This approach is demonstrated in the next Java code listing.
79
Client API
While short, the code in the example performs multiple actions. First, it will build the the request from the
invocationBuilder. The URI of request will be http://example.com/rest/resource/
helloworld?greeting="Hi%20World!" and the request will contain some-header: true
and Accept: text/plain headers. The request will then pass trough all configured request
filters ( AnotherClientFilter, ThirdClientFilter and FilterForExampleCom). Once
processed by the filters, the request will be sent to the remote resource. Let's say the resource then returns an
HTTP 200 message with a plain text response content that contains the value sent in the request greeting
query parameter. Now we can observe the returned response:
1 System.out.println(response.getStatus());
2 System.out.println(response.readEntity(String.class));
200
Hi World!
As we can see, the request was successfully processed (code 200) and returned an entity
(representation) is "Hi World!". Note that since ve have configured a MyClientResponseFilter
in the resource target, when response.readEntity(String.class) gets called, the
response returned from the remote endpoint is passed through the response filter chain
(including the MyClientResponseFilter) and entity interceptor chain and at last
a proper MessageBodyReader<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/
MessageBodyReader.html] is located to read the response content bytes from the response stream into a
Java String instance. Check Chapter 10, Filters and Interceptors to lear more about request and response
filters and entity interceptors.
Imagine now that you would like to invoke a POST request but without any query parameters. You would
just use the helloworldWebTarget instance created earlier and call the post() instead of get().
1 Response postResponse =
2 helloworldWebTarget.request(MediaType.TEXT_PLAIN_TYPE)
3 .post(Entity.entity("A string entity to be POSTed", MediaType.T
80
Client API
16 helloworldWebTargetWithQueryParam.request(MediaType.TEXT_PLAIN_TYPE);
17 invocationBuilder.header("some-header", "true");
18
19 Response response = invocationBuilder.get();
20 System.out.println(response.getStatus());
21 System.out.println(response.readEntity(String.class));
Now we can try to leverage the fluent API style to write this code in a more compact way.
The code above does the same thing except it skips the generic Response processing and directly requests
an entity in the last get(String.class) method call. This shortcut method let's you specify that (in
case the response was returned successfully with a HTTP 2xx status code) the response entity should be
returned as Java String type. This compact example demonstrates another advantage of the JAX-RS
client API. The fluency of JAX-RS Client API is convenient especially with simple use cases. Here is
another a very simple GET request returning a String representation (entity):
InputStream in = response.readEntity(InputStream.class);
in.close();
Note that it is important to close the stream after processing so that resources are freed up.
File f = ...
81
Client API
...
webTarget.request().post(Entity.entity(f, MediaType.TEXT_PLAIN_TYPE));
Classes or implementations of the provider-based interfaces need to be registered as providers within the
JAX-RS or Jersey Client API components that implement Configurable contract (ClientBuilder,
Client, WebTarget or ClientConfig), as was shown in the earlier sections. Some media types
are provided in the form of JAX-RS Feature [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/
rs/core/Feature.html] a concept that allows the extension providers to group together multiple different
extension providers and/or configuration properties in order to simplify the registration and configuration
of the provided feature by the end users. For example, MoxyJsonFeature [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/moxy/json/MoxyJsonFeature.html] can be register to enable
and configure JSON binding support via MOXy library.
82
Client API
Warning
Be aware of using other than default Connector implementation. There is an issue
handling HTTP headers in WriterInterceptor or MessageBodyWriter<T>. If
you need to change header fields do not use nor ApacheConnectorProvider
nor GrizzlyConnectorProvider nor JettyConnectorProvider neither
NettyConnectorProvider. The issue for example applies to Jersey Multipart feature that
also modifies HTTP headers.
On the other hand, in the default transport connector, there are some restrictions on the
headers, that can be sent in the default configuration. HttpUrlConnectorProvider uses
HttpUrlConnection as an underlying connection implementation. This JDK class by default
restricts the use of following headers:
• Access-Control-Request-Headers
• Access-Control-Request-Method
• Connection (with one exception - Connection header with value Closed is allowed
by default)
• Content-Length
• Content-Transfer-Encoding-
• Host
• Keep-Alive
• Origin
• Trailer
• Transfer-Encoding
• Upgrade
• Via
83
Client API
Note, that internally the HttpUrlConnection instances are pooled, so (un)setting the
property after already creating a target typically does not have any effect. The property influences
all the connections created after the property has been (un)set, but there is no guarantee, that your
request will use a connection created after the property change.
In a simple environment, setting the property before creating the first target is sufficient,
but in complex environments (such as application servers), where some poolable connections
might exist before your application even bootstraps, this approach is not 100% reliable and
we recommend using a different client transport connector, such as Apache Connector. These
limitations have to be considered especially when invoking CORS (Cross Origin Resource
Sharing) requests.
Jersey contains the following useful client-side filters (and features registering filters) that you may want
to use in your applications:
84
Client API
CsrfProtectionFilter [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/filter/
CsrfProtectionFilter.html]: Cross-site request forgery protection filter (adds X-Requested-By to each
state changing request).
EncodingFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/filter/
EncodingFeature.html]: Feature that registers encoding filter which use registered ContentEncoder
[https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/spi/ContentEncoder.html]s to encode
and decode the communication. The encoding/decoding is performed in interceptor (you don't need to
register this interceptor). Check the javadoc of the EncodingFeature [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/client/filter/EncodingFeature.html] in order to use it.
HttpAuthenticationFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/
authentication/HttpAuthenticationFeature.html]: HTTP Authentication Feature (see ??? below).
Note that these features are provided by Jersey, but since they use and implement JAX-RS API, the features
should be portable and run in any JAX-RS implementation, not just Jersey. See Chapter 10, Filters and
Interceptors chapter for more information on filters and interceptors.
If you don't read the entity, then you need to close the response manually by response.close().
Also if the entity is read into an InputStream [http://docs.oracle.com/javase/6/docs/api/java/io/
InputStream.html] (by response.readEntity(InputStream.class)), the connection stays
open until you finish reading from the InputStream. In that case, the InputStream or the Response
should be closed manually at the end of reading from InputStream.
85
Client API
The example above shows how to setup a custom SslContext to the ClientBuilder. Creating
a SslContext can be more difficult as you might need to init instance properly with the
protocol, KeyStore, TrustStore, etc. Jersey offers a utility SslConfigurator [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/SslConfigurator.html] class that can be used to setup the
SslContext. The SslConfigurator can be configured based on standardized system properties
for SSL configuration, so for example you can configure the KeyStore file name using a
environment variable javax.net.ssl.keyStore and SslConfigurator will use such a variable
to setup the SslContext. See javadoc of SslConfigurator [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/SslConfigurator.html] for more details. The following code shows how a
SslConfigurator can be used to create a custom SSL context.
86
Client API
Note that you can also setup KeyStore and TrustStore directly on a ClientBuilder instance
without wrapping them into the SslContext. However, if you setup a SslContext it will override
any previously defined KeyStore and TrustStore settings. ClientBuilder also offers a
method for defining a custom HostnameVerifier [http://docs.oracle.com/javase/6/docs/api/javax/net/ssl/
HostnameVerifier.html] implementation. HostnameVerifier implementations are invoked when
default host URL verification fails.
Important
A behaviour of HostnameVerifier [http://docs.oracle.com/javase/6/docs/api/javax/net/
ssl/HostnameVerifier.html] is dependent on an http client implementation.
HttpUrlConnectorProvider and ApacheConnectorProvider work properly, that
means that after the unsuccessful URL verification HostnameVerifier is called
and by means of it is possible to revalidate URL using a custom implementation of
HostnameVerifier and go on in a handskahe processing. JettyConnectorProvider
and GrizzlyConnectorProvider provide only host URL verification and throw a
CertificateException without any possibility to use custom HostnameVerifier.
Moreover, in case of JettyConnectorProvider there is a property
JettyClientProperties.ENABLE_SSL_HOSTNAME_VERIFICATION [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/client/
JettyClientProperties.html#ENABLE_SSL_HOSTNAME_VERIFICATION] to disable an
entire host URL verification mechanism in a handshake.
Important
Note that to utilize HTTP with SSL it is necessary to utilize the “https” scheme.
Important
In version prior to Jersey 2.5 the support was provided
by org.glassfish.jersey.client.filter.HttpBasicAuthFilter and
org.glassfish.jersey.client.filter.HttpDigestAuthFilter. Since Jersey
2.5 these filters are deprecated (and removed in 2.6) and both authentication methods are
provided by single Feature HttpAuthenticationFeature [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/client/authentication/HttpAuthenticationFeature.html].
• BASIC: Basic preemptive authentication. In preemptive mode the authentication information is send
always with each HTTP request. This mode is more usual than the following non-preemptive mode (if
you require BASIC authentication you will probably use this preemptive mode). This mode must be
combined with usage of SSL/TLS as the password is send only BASE64 encoded.
87
Client API
• UNIVERSAL: Combination of basic and digest authentication. The feature works in non-preemptive
mode which means that it sends requests without authentication information. If 401 status code is
returned, the request is repeated and an appropriate authentication is used based on the authentication
requested in the response (defined in WWW-Authenticate HTTP header. The feature remembers
which authentication requests were successful for given URI and next time tries to preemptively
authenticate against this URI with latest successful authentication method.
To initialize the feature use static methods and builder of this feature. Example of building the feature in
Basic authentication mode:
You can also build the feature without any default credentials:
In this case you need to supply username and password for each request using request properties:
This allows you to reuse the same client for authenticating with many different credentials.
88
Chapter 6. Reactive Jersey Client API
Reactive Jersey Client API is quite a generic API allowing end users to utilize the popular reactive
programming model when using Jersey Client. Several extensions come out of the box with Jersey that
bring support for several existing 3rd party libraries for reactive programming. Along with describing the
API itself, this section also covers existing extension modules and provides hints to implement a custom
extension if needed.
If you are not familiar with the JAX-RS Client API, it is recommended that you see Chapter 5, Client API
where the basics of JAX-RS Client API along with some advanced techniques are described.
• Destinations service – provides a list of visited and recommended destinations for an authenticated
customer.
• Quoting service – provides price calculation for a customer to travel to a recommended destination.
The task is to create a publicly available feature that would, for an authenticated user, display a list
of 10 last visited places and also display a list of 10 new recommended destinations including weather
forecast and price calculations for the user. Notice that some of the requests (to retrieve data) depend
on results of previous requests. E.g. getting recommended destinations depends on obtaining information
about the authenticated user first. Obtaining weather forecast depends on destination information, etc. This
relationship between some of the requests is an important part of the problem and an area where you can
take a real advantage of the reactive programming model.
One way how to obtain data is to make multiple HTTP method calls from the client (e.g. mobile device)
to all services involved and combine the retrieved data on the client. However, since the basic services are
available in the internal network only we'd rather create a public orchestration layer instead of exposing
all internal services to the outside world. The orchestration layer would expose only the desired operations
of the basic services to the public. To limit traffic and achieve lower latency we'd like to return all the
necessary information to the client in a single response.
The orchestration layer is illustrated in the Figure 6.1. The layer accepts requests from the outside and
is responsible of invoking multiple requests to the internal services. When responses from the internal
services are available in the orchestration layer they're combined into a single response that is sent back
to the client.
89
Reactive Jersey Client API
The next sections describe various approaches (using JAX-RS Client) how the orchestration layer can be
implemented.
A Naive Approach
The simplest way to implement the orchestration layer is to use synchronous approach. For this purpose
we can use JAX-RS Client Sync API (see Example 6.1, “Excerpt from a synchronous approach
while implementing the orchestration layer”). The implementation is simple to do, easy to read and
straightforward to debug.
90
Reactive Jersey Client API
The downside of this approach is it's slowness. You need to sequentially process all the independent
requests which means that you're wasting resources. You are needlessly blocking threads, that could be
otherwise used for some real work.
If you take a closer look at the example you can notice that at the moment when all the recommended
destinations are available for further processing we try to obtain forecasts for these destinations. Obtaining
a weather forecast can be done only for a single destination with a single request, so we need to make
10 requests to the Forecast service to get all the destinations covered. In a synchronous way this means
getting the forecasts one-by-one. When one response with a forecast arrives we can send another request
to obtain another one. This takes time. The whole process of constructing a response for the client can
be seen in Figure 6.2.
Let's try to quantify this with assigning an approximate time to every request we make to the internal
services. This way we can easily compute the time needed to complete a response for the client. For
example, obtaining
When summed up, 5400 ms is approximately needed to construct a response for the client.
Figure 6.2. Time consumed to create a response for the client – synchronous way
Synchronous approach is better to use for lower number of requests (where the accumulated time doesn't
matter that much) or for a single request that depends on the result of previous operations.
Optimized Approach
The amount of time needed by the synchronous approach can be lowered by invoking independent requests
in parallel. We're going to use JAX-RS Client Async API to illustrate this approach. The implementation
in this case is slightly more difficult to get right because of the nested callbacks and the need to wait at
some points for the moment when all partial responses are ready to be processed. The implementation is
also a little bit harder to debug and maintain. The nested calls are causing a lot of complexity here. An
example of concrete Java code following the asynchronous approach can be seen in Example 6.2, “Excerpt
from an asynchronous approach while implementing the orchestration layer”.
91
Reactive Jersey Client API
3
4 // Obtain recommended destinations. (does not depend on visited ones)
5 destination.path("recommended").request()
6 // Identify the user.
7 .header("Rx-User", "Async")
8 // Async invoker.
9 .async()
10 // Return a list of destinations.
11 .get(new InvocationCallback<List<Destination>>() {
12 @Override
13 public void completed(final List<Destination> recommended) {
14 final CountDownLatch innerLatch = new CountDownLatch(recommende
15
16 // Forecasts. (depend on recommended destinations)
17 final Map<String, Forecast> forecasts = Collections.synchronize
18 for (final Destination dest : recommended) {
19 forecast.resolveTemplate("destination", dest.getDestination
20 .async()
21 .get(new InvocationCallback<Forecast>() {
22 @Override
23 public void completed(final Forecast forecast)
24 forecasts.put(dest.getDestination(), foreca
25 innerLatch.countDown();
26 }
27
28 @Override
29 public void failed(final Throwable throwable) {
30 errors.offer("Forecast: " + throwable.getMe
31 innerLatch.countDown();
32 }
33 });
34 }
35
36 // Have to wait here for dependent requests ...
37 try {
38 if (!innerLatch.await(10, TimeUnit.SECONDS)) {
39 errors.offer("Inner: Waiting for requests to complete h
40 }
41 } catch (final InterruptedException e) {
42 errors.offer("Inner: Waiting for requests to complete has b
43 }
44
45 // Continue with processing.
46 }
47
48 @Override
49 public void failed(final Throwable throwable) {
50 errors.offer("Recommended: " + throwable.getMessage());
51 }
52 });
The example is a bit more complicated from the first glance. We provided an InvocationCallback
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/InvocationCallback.html] to async
get method. One of the callback methods (completed or failed) is called when the request
92
Reactive Jersey Client API
finishes. This is a pretty convenient way to handle async invocations when no nested calls are
present. Since we have some nested calls (obtaining weather forecasts) we needed to introduce a
CountDownLatch [http://docs.oracle.com/javase/6/docs/api/java/util/concurrent/CountDownLatch.html]
synchronization primitive as we use asynchronous approach in obtaining the weather forecasts as well.
The latch is decreased every time a request, to the Forecasts service, completes successfully or fails. This
indicates that the request actually finished and it is a signal for us that we can continue with processing
(otherwise we wouldn't have all required data to construct the response for the client). This additional
synchronization is something that was not present when taking the synchronous approach, but it is needed
here.
Also the error processing can not be written as it could be in an ideal case. The error handling is scattered in
too many places within the code, that it is quite difficult to create a comprehensive response for the client.
On the other hand taking asynchronous approach leads to code that is as fast as it gets. The resources are
used optimally (no waiting threads) to achieve quick response time. The whole process of constructing
the response for the client can be seen in Figure 6.3. It only took 730 ms instead of 5400 ms which we
encountered in the previous approach.
Figure 6.3. Time consumed to create a response for the client – asynchronous way
As you can guess, this approach, even with all it's benefits, is the one that is really hard to implement,
debug and maintain. It's a safe bet when you have many independent calls to make but it gets uglier with
an increasing number of nested calls.
Reactive Approach
Reactive approach is a way out of the so-called Callback Hell which you can encounter when dealing
with Java's Futures or invocation callbacks. Reactive approach is based on a data-flow concept and the
execution model propagate changes through the flow. An example of a single item in the data-flow chain
can be a JAX-RS Client HTTP method call. When the JAX-RS request finishes then the next item (or
the user code) in the data-flow chain is notified about the continuation, completion or error in the chain.
You're more describing what should be done next than how the next action in the chain should be triggered.
The other important part here is that the data-flows are composable. You can compose/transform multiple
flows into the resulting one and apply more operations on the result.
An example of this approach can be seen in Example 6.3, “Excerpt from a reactive approach while
implementing the orchestration layer”. The APIs would be described in more detail in the next sections.
93
Reactive Jersey Client API
As you can see the code achieves the same work as the previous two examples. It's more readable than
the pure asynchronous approach even though it's equally fast. It's as easy to read and implement as the
synchronous approach. The error processing is also better handled in this way than in the asynchronous
approach.
When dealing with a large amount of requests (that depend on each other) and when you need to compose/
combine the results of these requests, the reactive programming model is the right technique to use.
When you compare synchronous invocation of HTTP calls ( Example 6.4, “Synchronous invocation of
HTTP requests”)
94
Reactive Jersey Client API
4 .get();
it is apparent how to pretty conveniently modify the way how a request is invoked (from sync to async) only
by calling async method on an Invocation.Builder [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/client/Invocation.Builder.html].
Naturally, it'd be nice to copy the same pattern to allow invoking requests in a reactive way. Just instead
of async you'd call rx on an extension of Invocation.Builder, like in Example 6.6, “Reactive
invocation of HTTP requests”.
To achieve this a few new interfaces had to be introduced in the Reactive Jersey Client API. The first
new interface is RxInvoker [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/
RxInvoker.html] which is very similar to SyncInvoker [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/client/SyncInvoker.html] and AsyncInvoker [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/client/AsyncInvoker.html]. It contains all methods present in the two latter JAX-RS
interfaces but the RxInvoker interface is more generic, so that it can be extended and used in particular
implementations taking advantage of various reactive libraries. Extending this new interface in a particular
implementation also preserves type safety which means that you're not loosing type information when a
HTTP method call returns an object that you want to process further.
As a user of the Reactive Jersey Client API you only need to keep in mind that you won't be working with
RxInvoker directly. You'd rather be working with an extension of this interface created for a particular
implementation and you don't need to be bothered much with why are things designed the way they are.
Note
To see how the RxInvoker should be extended, refer to Section 6.4, “Implementing Support
for Custom Reactive Libraries (SPI)”.
The important thing to notice here is that an extension of RxInvoker holds the type information and the
Reactive Jersey Client needs to know about this type to properly propagate it among the method calls you'll
be making. This is the reason why other interfaces (described bellow) are parametrized with this type.
95
Reactive Jersey Client API
can simply access the reactive request invocation interface to invoke the built request and the second allows
you to specify the executor service to execute the current reactive request (and only this one).
With all these interfaces ready the only question left behind is the way how to create an instance of
Reactive Jersey Client. This functionality is beyond the actual JAX-RS API. It is not possible to create
such a client via the standard ClientBuilder entry point. To resolve this, we introduced a new helper
class, Rx [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/Rx.html], which does
the job. This class contains factory methods to create a new (reactive) client from scratch
• Rx.newClient(Class) [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/
Rx.html#newClient(java.lang.Class)]
• Rx.newClient(Class,ExecutorService) [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/rx/Rx.html#newClient(java.lang.Class, java.util.concurrent.ExecutorService)]
and it also contains methods to enhance an existing JAX-RS Client and WebTarget
• Rx.from(Client,Class) [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/
Rx.html#from(javax.ws.rs.client.Client, java.lang.Class)]
• Rx.from(Client,Class,ExecutorService) [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/rx/Rx.html#from(javax.ws.rs.client.Client, java.lang.Class,
java.util.concurrent.ExecutorService)]
• Rx.from(WebTarget,Class) [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/
Rx.html#from(javax.ws.rs.client.WebTarget, java.lang.Class)]
• Rx.from(WebTarget,Class,ExecutorService) [https://jersey.java.net/apidocs/2.25.1/jersey/org/
glassfish/jersey/client/rx/Rx.html#from(javax.ws.rs.client.WebTarget, java.lang.Class,
java.util.concurrent.ExecutorService)]
Similarly to the RxInvoker interface the Rx class is general and does not stick to any conrete
implementation (to see a list of supported reactive libraries, refer to Section 6.3, “Supported Reactive
Libraries”). When Reactive Clients are created using Rx factory methods, the actual invoker type
parameter has to be provided (this is not the case with similar helper classes created for particular reactive
libraries).
Dependencies
The Reactive Jersey Client is implemented as an extension module in Jersey. For Maven users, simply add
the following dependency to your pom.xml:
<dependency>
<groupId>org.glassfish.jersey.ext.rx</groupId>
<artifactId>jersey-rx-client</artifactId>
<version>2.25.1</version>
96
Reactive Jersey Client API
</dependency>
With this dependency only the basic classes would be added to your class-path without any support for any
reactive library. To add support for a particular library, see the Section 6.3, “Supported Reactive Libraries”.
Note
If you're not using Maven (or other dependency management tool) make sure to add also all
the transitive dependencies of this extension module (see jersey-rx-client [https://jersey.java.net/
project-info/2.25.1/jersey/project/project/jersey-rx-client/dependencies.html]) on the class-path.
• RxJava (Observable)
• JSR-166e (CompletableFuture)
Requests are by default invoked at the moment when a subscriber is subscribed to an observable (it's a cold
Observable). If not said otherwise a separate thread (JAX-RS Async Client requests) is used to obtain
data. This behavior can be overridden by providing an ExecutorService [http://docs.oracle.com/javase/6/
docs/api/java/util/concurrent/ExecutorService.html] when a reactive Client or WebTarget is created
or when a particular requests is about to be invoked.
Usage
A JAX-RS Client or WebTarget aware of reactive HTTP
calls, Jersey's RxClient [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/
RxClient.html] or RxWebTarget [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/
rx/RxWebTarget.html] parametrized by RxObservableInvoker, can be created either via the generic
Rx [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/Rx.html] entry point or
the customized RxObservable [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/
rxjava/RxObservable.html] one.
When using the generic entry point you need to specify the RxObservableInvoker invoker type to
obtain an appropriate instance of the client or the web target.
97
Reactive Jersey Client API
You can skip specifying the invoker type when you use RxObservable entry point.
In addition to specifying the invoker type and client/web-target instances, when using the factory
methods in the entry points mentioned above, an ExecutorService can be specified that
will be used to execute requests on separate threads. In the case of RxJava the executor
service is utilized to create a Scheduler [http://reactivex.io/RxJava/javadoc//rx/Scheduler.html] that
is later leveraged in both Observable#observeOn(rx.Scheduler) [http://reactivex.io/RxJava/javadoc//
rx/Observable.html#observeOn(rx.Scheduler)] and Observable#subscribeOn(rx.Scheduler) [http://
reactivex.io/RxJava/javadoc//rx/Observable.html#subscribeOn(rx.Scheduler)].
An example of obtaining Observable with JAX-RS Response from a remote service can be seen in
Example 6.9, “Obtaining Observable<Response> from Jersey/RxJava Client”.
Dependencies
The Reactive Jersey Client with RxJava support is available as an extension module in Jersey. For Maven
users, simply add the following dependency to your pom.xml:
<dependency>
<groupId>org.glassfish.jersey.ext.rx</groupId>
<artifactId>jersey-rx-client-rxjava</artifactId>
<version>2.25.1</version>
</dependency>
98
Reactive Jersey Client API
After this step you can use the extended client right away. The dependency transitively adds the
following dependencies to your class-path as well: org.glassfish.jersey.ext.rx:jersey-
rx-client and io.reactivex:rxjava.
Note
If you're not using Maven (or other dependency management tool) make sure to
add also all the transitive dependencies of this extension module (see jersey-rx-client-
rxjava [https://jersey.java.net/project-info/2.25.1/jersey/project/project/jersey-rx-client-rxjava/
dependencies.html]) on the class-path.
Requests are by default invoked immediately. If not said otherwise the ForkJoinPool#commonPool()
[http://docs.oracle.com/javase/8/docs/api/java/util/concurrent/ForkJoinPool.html#commonPool--] pool is
used to obtain a thread which processed the request. This behavior can be overridden by providing
an ExecutorService [http://docs.oracle.com/javase/6/docs/api/java/util/concurrent/ExecutorService.html]
when a reactive Client or WebTarget is created or when a particular request is about to be invoked.
Usage
A JAX-RS Client or WebTarget aware of reactive HTTP
calls, Jersey's RxClient [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/
RxClient.html] or RxWebTarget [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/
rx/RxWebTarget.html] parametrized by RxCompletionStageInvoker, can be created either via
the generic Rx [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/Rx.html] entry
point or the customized RxCompletionStage [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/rx/java8/RxCompletionStage.html] one.
When using the generic entry point you need to specify the RxCompletionStage invoker type to obtain
an appropriate instance of the client or the web target.
You can skip specifying the invoker type when you use the RxCompletionStage entry point.
99
Reactive Jersey Client API
In addition to specifying the invoker type and client/web-target instances, when using the factory methods
in the entry points mentioned above, an ExecutorService instance could be specifies that should be
used to execute requests on a separate thread.
An example of obtaining CompletionStage with JAX-RS Response from a remote service can be
seen in Example 6.12, “Obtaining CompletionStage<Response> from Jersey/Java 8 Client”.
Dependencies
Important
To use this module the application has to be compiled (with javac -target option
set to 1.8) and run in a Java 8 environment. If you want to use Reactive Jersey Client
with CompletableFuture in pre-Java 8 environment, see Section 6.3.4, “JSR-166e
(CompletableFuture)”.
The Reactive Jersey Client with Java 8 support is available as an extension module in Jersey. For Maven
users, simply add the following dependency to your pom.xml:
<dependency>
<groupId>org.glassfish.jersey.ext.rx</groupId>
<artifactId>jersey-rx-client-java8</artifactId>
<version>2.25.1</version>
</dependency>
After this step you can use the extended client right away. The dependency transitively adds the following
dependency to your class-path as well: org.glassfish.jersey.ext.rx:jersey-rx-client.
Note
If you're not using Maven (or other dependency management tool) make sure
to add also all the transitive dependencies of this extension module (see jersey-
rx-client-java8 [https://jersey.java.net/project-info/2.25.1/jersey/project/project/jersey-rx-client-
java8/dependencies.html]) on the class-path.
100
Reactive Jersey Client API
Usage
A JAX-RS Client or WebTarget aware of reactive HTTP
calls, Jersey's RxClient [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/
RxClient.html] or RxWebTarget [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/
rx/RxWebTarget.html] parametrized by RxListenableFutureInvoker, can be created either via
the generic Rx [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/Rx.html] entry
point or the customized RxListenableFuture [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/rx/guava/RxListenableFuture.html] one.
When using the generic entry point you need to specify the RxListenableFutureInvoker invoker
type to obtain an appropriate instance of the client or the web target.
You can skip specifying the invoker type when you use RxListenableFuture entry point.
101
Reactive Jersey Client API
In addition to specifying the invoker type and client/web-target instances, when using the factory methods
in the entry points mentioned above, an ExecutorService can be specified that will be used to execute
requests on a separate thread.
An example of obtaining ListenableFuture with JAX-RS Response from a remote service can be
seen in Example 6.15, “Obtaining ListenableFuture<Response> from Jersey/Guava Client”.
Dependencies
The Reactive Jersey Client with Guava support is available as an extension module in Jersey. For Maven
users, simply add the following dependency to your pom.xml:
<dependency>
<groupId>org.glassfish.jersey.ext.rx</groupId>
<artifactId>jersey-rx-client-guava</artifactId>
<version>2.25.1</version>
</dependency>
After this step you can use the extended client right away. The dependency transitively adds the
following dependencies to your class-path as well: org.glassfish.jersey.ext.rx:jersey-
rx-client and com.google.guava:guava.
Note
If you're not using Maven (or other dependency management tool) make sure to
add also all the transitive dependencies of this extension module (see jersey-rx-client-
guava [https://jersey.java.net/project-info/2.25.1/jersey/project/project/jersey-rx-client-guava/
dependencies.html]) on the class-path.
102
Reactive Jersey Client API
Requests are by default invoked immediately. If not said otherwise the ForkJoinPool.html#commonPool()
[http://gee.cs.oswego.edu/dl/jsr166/dist/jsr166edocs//jsr166e/ForkJoinPool.html#commonPool()] pool is
used to obtain a thread which processed the request. This behavior can be overridden by providing
an ExecutorService [http://docs.oracle.com/javase/6/docs/api/java/util/concurrent/ExecutorService.html]
when a reactive Client or WebTarget is created or when a particular requests is about to be invoked.
Usage
A JAX-RS Client or WebTarget aware of reactive HTTP
calls, Jersey's RxClient [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/
RxClient.html] or RxWebTarget [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/
rx/RxWebTarget.html] parametrized by RxCompletableFutureInvoker, can be created either via
the generic Rx [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/rx/Rx.html] entry
point or the customized RxCompletableFuture [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/rx/jsr166e/RxCompletableFuture.html] one.
When using the generic entry point you need to specify the RxCompletableFutureInvoker invoker
type to obtain an appropriate instance of the client or the web target.
You can skip specifying the invoker type when you use RxCompletableFuture entry point.
In addition to specifying the invoker type and client/web-target instances, when using the factory methods
in the entry points mentioned above, an ExecutorService can be specified that is further used to
execute requests on a separate thread.
An example of obtaining CompletableFuture with JAX-RS Response from a remote service can
be seen in Example 6.18, “Obtaining CompletableFuture<Response> from Jersey/JSR-166e Client”.
103
Reactive Jersey Client API
2 .target("http://example.com/resource")
3 .request()
4 .rx()
5 .get();
6
Dependencies
Important
If you're compiling and running your application in Java 8 environment consider using Reactive
Jersey Client with CompletableFuture with Section 6.3.2, “Java 8 (CompletionStage and
CompletableFuture)” instead.
The Reactive Jersey Client with JSR-166e support is available as an extension module in Jersey. For Maven
users, simply add the following dependency to your pom.xml:
<dependency>
<groupId>org.glassfish.jersey.ext.rx</groupId>
<artifactId>jersey-rx-client-jsr166e</artifactId>
<version>2.25.1</version>
</dependency>
After this step you can use the extended client right away. The dependency transitively adds the
following dependencies to your class-path as well: org.glassfish.jersey.ext.rx:jersey-
rx-client and org.glassfish.jersey.bundles.repackaged:jersey-jsr166e. The
later is the JSR-166e library repackaged by Jersey to make sure the OSGi headers are correct and the
library can be used in OSGi environment.
Note
If you're not using Maven (or other dependency management tool) make sure to
add also all the transitive dependencies of this extension module (see jersey-rx-
client-jsr166e [https://jersey.java.net/project-info/2.25.1/jersey/project/project/jersey-rx-client-
jsr166e/dependencies.html]) on the class-path.
104
Reactive Jersey Client API
As you can notice it's too generic as it's designed to support various reactive libraries without bringing
any additional abstractions and restrictions. The first type parameter, T, is the asynchronous/event-based
completion aware type (e.g. Observable). The given type should be parametrized with the actual
response type. And since it's not possible to parametrize type parameter it's an obligation of the extension
of RxInvoker to do that. That applies to simpler methods, such as get(), as well as to more advanced
methods, for example get(Class).
In the first case it's enough to parametrize the needed type with Response, e.g.
Observable<Response> get(). The second case uses the type parameter from the parameter of
the method. To accordingly extend the get(Class<R>) method you need to parametrize the needed
type with R type parameter, e.g. <T> Observable<T> get(Class<T> responseType).
To summarize the requirements above and illustrate them in one code snippet the Example 6.20,
“Extending RxInvoker - RxObservableInvoker” is an excerpt from RxObservableInvoker that works
with RxJava's Observable.
105
Reactive Jersey Client API
RxInvokerProvider.html] SPI interface is needed. When a concrete RxInvoker is requested the runtime
goes through all available providers and finds one which supports the given invoker type. It is expected
that each provider supports mapping for distinct set of types and subtypes so that different providers do
not conflict with each other.
6.5. Examples
To see a complete working examples of various approaches using JAX-RS Client API (Sync and Async)
and Reactive Jersey Client APIs feature refer to the:
• Travel Agency (Orchestration Layer) Example using Reactive Jersey Client API [https://github.com/
jersey/jersey/tree/2.25.1/examples/rx-client-webapp]
• Travel Agency (Orchestration Layer) Example using Reactive Jersey Client API (Java 8) [https://
github.com/jersey/jersey/tree/2.25.1/examples/rx-client-java8-webapp]
106
Chapter 7. Representations and
Responses
7.1. Representations and Java Types
Previous sections on @Produces [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/
rs/Produces.html] and @Consumes [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
Consumes.html] annotations referred to media type of an entity representation. Examples above depicted
resource methods that could consume and/or produce String Java type for a number of different media
types. This approach is easy to understand and relatively straightforward when applied to simple use cases.
To cover also other cases, handling non-textual data for example or handling data stored in the file system,
etc., JAX-RS implementations are required to support also other kinds of media type conversions where
additional, non-String, Java types are being utilized. Following is a short listing of the Java types that are
supported out of the box with respect to supported media type:
• byte[]
• java.lang.String
• java.io.File
• javax.activation.DataSource
• javax.xml.transform.Source
• javax.xml.bind.JAXBElement
• MultivaluedMap<String,String>
• java.lang.Boolean
• java.lang.Character
• java.lang.Number
Unlike method parameters that are associated with the extraction of request parameters, the method
parameter associated with the representation being consumed does not require annotating. In other words
107
Representations and Responses
the representation (entity) parameter does not require a specific 'entity' annotation. A method parameter
without a annotation is an entity. A maximum of one such unannotated method parameter may exist since
there may only be a maximum of one such representation sent in a request.
The representation being produced corresponds to what is returned by the resource method. For example
JAX-RS makes it simple to produce images that are instance of File as follows:
Example 7.1. Using File with a specific media type to produce a response
1 @GET
2 @Path("/images/{image}")
3 @Produces("image/*")
4 public Response getImage(@PathParam("image") String image) {
5 File f = new File(image);
6
7 if (!f.exists()) {
8 throw new WebApplicationException(404);
9 }
10
11 String mt = new MimetypesFileTypeMap().getContentType(f);
12 return Response.ok(f, mt).build();
13 }
The File type can also be used when consuming a representation (request entity). In that case a temporary
file will be created from the incoming request entity and passed as a parameter to the resource method.
The Content-Type response header (if not set programmatically as described in the next section)
will be automatically set based on the media types declared by @Produces [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Produces.html] annotation. Given the following method, the most
acceptable media type is used when multiple output media types are allowed:
1 @GET
2 @Produces({"application/xml", "application/json"})
3 public String doGetAsXmlOrJson() {
4 ...
5 }
If application/xml is the most acceptable media type defined by the request (e.g. by header
Accept: application/xml), then the Content-Type response header will be set to
application/xml.
Example 7.2. Returning 201 status code and adding Location header in response
to POST request
1 @POST
108
Representations and Responses
2 @Consumes("application/xml")
3 public Response post(String content) {
4 URI createdUri = ...
5 create(content);
6 return Response.created(createdUri).build();
7 }
In the above no representation produced is returned, this can be achieved by building an entity as part of
the response as follows:
Response building provides other functionality such as setting the entity tag and last modified date of the
representation.
109
Representations and Responses
2
3 /**
4 * Create a HTTP 404 (Not Found) exception.
5 */
6 public CustomNotFoundException() {
7 super(Responses.notFound().build());
8 }
9
10 /**
11 * Create a HTTP 404 (Not Found) exception.
12 * @param message the String that is the entity of the 404 response.
13 */
14 public CustomNotFoundException(String message) {
15 super(Response.status(Responses.NOT_FOUND).
16 entity(message).type("text/plain").build());
17 }
18 }
Jersey supports extension of the exception mappers. These extended mappers must implement
the org.glassfish.jersey.spi.ExtendedExceptionMapper interface. This interface
additionally defines method isMappable(Throwable) which will be invoked by the Jersey runtime
when exception is thrown and this provider is considered as mappable based on the exception type. Using
this method the provider can reject mapping of the exception before the method toResponse is invoked.
The provider can for example check the exception parameters and based on them return false and let other
provider to be chosen for the exception mapping.
110
Representations and Responses
JAX-RS provides support for conditional GETs using the contextual interface Request [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Request.html].
The constructor of the SparklinesResouce root resource class computes an entity tag from the request
URI and then calls the request.evaluatePreconditions [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/core/Request.html#evaluatePreconditions(javax.ws.rs.core.EntityTag)] with that entity tag.
If a client request contains an If-None-Match header with a value that contains the same
entity tag that was calculated then the evaluatePreconditions [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/core/Request.html#evaluatePreconditions(javax.ws.rs.core.EntityTag)] returns a pre-
filled out response, with the 304 status code and entity tag set, that may be built and
returned. Otherwise, evaluatePreconditions [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/
rs/core/Request.html#evaluatePreconditions(javax.ws.rs.core.EntityTag)] returns null and the normal
response can be returned.
Notice that in this example the constructor of a resource class is used to perform actions that may otherwise
have to be duplicated to invoked for each resource method. The life cycle of resource classes is per-request
111
Representations and Responses
which means that the resource instance is created for each request and therefore can work with request
parameters and for example make changes to the request processing by throwing an exception as it is
shown in this example.
112
Chapter 8. JAX-RS Entity Providers
8.1. Introduction
Entity payload, if present in an received HTTP message, is passed to Jersey from an I/O container as
an input stream. The stream may, for example, contain data represented as a plain text, XML or JSON
document. However, in many JAX-RS components that process these inbound data, such as resource
methods or client responses, the JAX-RS API user can access the inbound entity as an arbitrary Java
object that is created from the content of the input stream based on the representation type information.
For example, an entity created from an input stream that contains data represented as a XML document,
can be converted to a custom JAXB bean. Similar concept is supported for the outbound entities. An entity
returned from the resource method in the form of an arbitrary Java object can be serialized by Jersey
into a container output stream as a specified representation. Of course, while JAX-RS implementations
do provide default support for most common combinations of Java type and it's respective on-the-wire
representation formats, JAX-RS implementations do not support the conversion described above for any
arbitrary Java type and any arbitrary representation format by default. Instead, a generic extension concept
is exposed in JAX-RS API to allow application-level customizations of this JAX-RS runtime to support
for entity conversions. The JAX-RS extension API components that provide the user-level extensibility
are typically referred to by several terms with the same meaning, such as entity providers, message body
providers, message body workers or message body readers and writers. You may find all these terms used
interchangeably throughout the user guide and they all refer to the same concept.
In JAX-RS extension API (or SPI - service provider interface, if you like) the concept
is captured in 2 interfaces. One for handling inbound entity representation-to-Java de-
serialization - MessageBodyReader<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
ext/MessageBodyReader.html] and the other one for handling the outbound entity Java-to-representation
serialization - MessageBodyWriter<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/
MessageBodyWriter.html]. A MessageBodyReader<T>, as the name suggests, is an extension that
supports reading the message body representation from an input stream and converting the data into an
instance of a specific Java type. A MessageBodyWriter<T> is then responsible for converting a
message payload from an instance of a specific Java type into a specific representation format that is sent
over the wire to the other party as part of an HTTP message exchange. Both of these providers can be used
to provide message payload serialization and de-serialization support on the server as well as the client
side. A message body reader or writer is always used whenever a HTTP request or response contains an
entity and the entity is either requested by the application code (e.g. injected as a parameter of JAX-RS
resource method or a response entity read on the client from a Response [https://jersey.java.net/apidocs-
javax.jax-rs/2.0.1/javax/ws/rs/core/Response.html]) or has to be serialized and sent to the other party (e.g.
an instance returned from a JAX-RS resource method or a request entity sent by a JAX-RS client).
113
JAX-RS Entity Providers
The resource class defines GET and POST resource methods. Both methods work with an entity that is
an instance of MyBean.
1 @XmlRootElement
2 public class MyBean {
3 @XmlElement
4 public String anyString;
5 @XmlElement
6 public int anyNumber;
7
8 public MyBean(String anyString, int anyNumber) {
9 this.anyString = anyString;
10 this.anyNumber = anyNumber;
11 }
12
13 // empty constructor needed for deserialization by JAXB
14 public MyBean() {
15 }
16
17 @Override
18 public String toString() {
19 return "MyBean{" +
20 "anyString='" + anyString + '\'' +
21 ", anyNumber=" + anyNumber +
22 '}';
23 }
24 }
8.2.1. MessageBodyWriter
The MyBean is a JAXB-annotated POJO. In GET resource method we return the instance of MyBean and
we would like Jersey runtime to serialize it into XML and write it as an entity body to the response output
stream. We design a custom MessageBodyWriter<T> that can serialize this POJO into XML. See
the following code sample:
114
JAX-RS Entity Providers
Note
Please note, that this is only a demonstration of how to write a custom entity provider. Jersey
already contains default support for entity providers that can serialize JAXB beans into XML.
1 @Produces("application/xml")
2 public class MyBeanMessageBodyWriter implements MessageBodyWriter<MyBean> {
3
4 @Override
5 public boolean isWriteable(Class<?> type, Type genericType,
6 Annotation[] annotations, MediaType mediaType) {
7 return type == MyBean.class;
8 }
9
10 @Override
11 public long getSize(MyBean myBean, Class<?> type, Type genericType,
12 Annotation[] annotations, MediaType mediaType) {
13 // deprecated by JAX-RS 2.0 and ignored by Jersey runtime
14 return 0;
15 }
16
17 @Override
18 public void writeTo(MyBean myBean,
19 Class<?> type,
20 Type genericType,
21 Annotation[] annotations,
22 MediaType mediaType,
23 MultivaluedMap<String, Object> httpHeaders,
24 OutputStream entityStream)
25 throws IOException, WebApplicationException {
26
27 try {
28 JAXBContext jaxbContext = JAXBContext.newInstance(MyBean.class);
29
30 // serialize the entity myBean to the entity output stream
31 jaxbContext.createMarshaller().marshal(myBean, entityStream);
32 } catch (JAXBException jaxbException) {
33 throw new ProcessingException(
34 "Error serializing a MyBean to the output stream", jaxbExceptio
35 }
36 }
37 }
8.2.1.1. MessageBodyWriter.isWriteable
A method isWriteable should return true if the MessageBodyWriter<T> is able to write the given
type. Method does not decide only based on the Java type of the entity but also on annotations attached
to the entity and the requested representation media type.
115
JAX-RS Entity Providers
Parameters type and genericType both define the entity, where type is a raw Java type (for example,
a java.util.List class) and genericType is a ParameterizedType [http://docs.oracle.com/
javase/6/docs/api/java/lang/reflect/ParameterizedType.html] including generic information (for example
List<String>).
Parameter annotations contains annotations that are either attached to the resource method and/or
annotations that are attached to the entity by building response like in the following piece of code:
1 @Path("resource")
2 public static class AnnotatedResource {
3
4 @GET
5 public Response get() {
6 Annotation annotation = AnnotatedResource.class
7 .getAnnotation(Path.class);
8 return Response.ok()
9 .entity("Entity", new Annotation[] {annotation}).build();
10 }
11 }
In the example above, the MessageBodyWriter<T> would get annotations parameter containing
a JAX-RS @GET annotation as it annotates the resource method and also a @Path annotation as it is
passed in the response (but not because it annotates the resource; only resource method annotations
are included). In the case of MyResource and method getMyBean the annotations would contain
the @GET [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/GET.html] and the @Produces
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Produces.html] annotation.
The last parameter of the isWriteable method is the mediaType which is the media type attached
to the response entity by annotating the resource method with a @Produces annotation or the request
media type specified in the JAX-RS Client API. In our example, the media type passed to providers for
the resource MyResource and method getMyBean would be "application/xml".
In our implementation of the isWriteable method, we just check that the type is MyBean. Please note,
that this method might be executed multiple times by Jersey runtime as Jersey needs to check whether this
provider can be used for a particular combination of entity Java type, media type, and attached annotations,
which may be potentially a performance hog. You can limit the number of execution by properly defining
the @Produces annotation on the MessageBodyWriter<T>. In our case thanks to @Produces
annotation, the provider will be considered as writeable (and the method isWriteable might be
executed) only if the media type of the outbound message is "application/xml". Additionally, the
provider will only be considered as possible candidate and its isWriteable method will be executed,
if the generic type of the provider is either a sub class or super class of type parameter.
8.2.1.2. MessageBodyWriter.writeTo
Once a message body writer is selected as the most appropriate (see the Section 8.3, “Entity Provider
Selection” for more details on entity provider selection), its writeTo method is invoked. This method
receives parameters with the same meaning as in isWriteable as well as a few additional ones.
In addition to the parameters already introduced, the writeTo method defies also httpHeaders
parameter, that contains HTTP headers associated with the outbound message.
116
JAX-RS Entity Providers
Note
When a MessageBodyWriter<T> is invoked, the headers still can be modified in this
point and any modification will be reflected in the outbound HTTP message being sent. The
modification of headers must however happen before a first byte is written to the supplied output
stream.
Another new parameter, myBean, contains the entity instance to be serialized (the type of entity
corresponds to generic type of MessageBodyWriter<T>). Related parameter entityStream
contains the entity output stream to which the method should serialize the entity. In our case we use JAXB
to marshall the entity into the entityStream. Note, that the entityStream is not closed at the end
of method; the stream will be closed by Jersey.
Important
Do not close the entity output stream in the writeTo method of your
MessageBodyWriter<T> implementation.
8.2.1.3. MessageBodyWriter.getSize
The method is deprecated since JAX-RS 2.0 and Jersey 2 ignores the return value. In JAX-RS 1.0
the method could return the size of the entity that would be then used for "Content-Length" response
header. In Jersey 2.0 the "Content-Length" parameter is computed automatically using an internal
outbound entity buffering. For details about configuration options of outbound entity buffering see the
javadoc of MessageProperties [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/message/
MessageProperties.html], property OUTBOUND_CONTENT_LENGTH_BUFFER which configures the
size of the buffer.
Note
You can disable the Jersey outbound entity buffering by setting the buffer size to 0.
After registering the MyBeanMessageBodyWriter and MyResource class in our application, the
request can be initiated (in this example from Client API).
117
JAX-RS Entity Providers
The client code initiates the GET which will be matched to the resource method
MyResource.getMyBean(). The response entity is de-serialized as a String.
The returned status is 200 and the entity is stored in the response in a XML format. Next, we will look at
how the Jersey de-serializes this XML document into a MyBean consumed by our POST resource method.
8.2.2. MessageBodyReader
In order to de-serialize the entity of MyBean on the server or the client, we need to implement
a custom MessageBodyReader<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/
MessageBodyReader.html].
Note
Please note, that this is only a demonstration of how to write a custom entity provider. Jersey
already contains default support for entity providers that can serialize JAXB beans into XML.
118
JAX-RS Entity Providers
26 }
27 }
28 }
8.2.2.1. MessageBodyReader.isReadable
It defines the method isReadable() which has a very simliar meaning as method isWriteable()
in MessageBodyWriter<T>. The method returns true if it is able to de-serialize the given type. The
annotations parameter contains annotations that are attached to the entity parameter in the resource
method. In our POST resource method postMyBean the entity parameter myBean is not annotated,
therefore no annotation will be passed to the isReadable. The mediaType parameter contains the entity
media type. The media type, in our case, must be consumable by the POST resource method, which
is specified by placing a JAX-RS @Consumes [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/
ws/rs/Consumes.html] annotation to the method. The resource method postMyBean() is annotated
with @Consumes("application/xml"), therefore for purpose of de-serialization of entity for the
postMyBean() method, only requests with entities represented as "application/xml" media type
will match the method. However, this method might be executed for for entity types that are sub classes
or super classes of the declared generic type on the MessageBodyReader<T> will be also considered.
It is a responsibility of the isReadable method to decide whether it is able to de-serialize the entity and
type comparison is one of the basic decision steps.
Tip
In order to reduce number of isReadable executions, always define correctly the consumable
media type(s) with the @Consumes annotation on your custom MessageBodyReader<T>.
8.2.2.2. MessageBodyReader.readFrom
The readForm() method gets the parameters with the same meaning as in isReadable(). The
additional entityStream parameter provides a handle to the entity input stream from which the entity
bytes should be read and de-serialized into a Java entity which is then returned from the method. Our
MyBeanMessageBodyReader de-serializes the incoming XML data into an instance of MyBean using
JAXB.
Important
Do not close the entity input stream in your MessageBodyReader<T> implementation. The
stream will be automatically closed by Jersey runtime.
119
JAX-RS Entity Providers
7 System.out.println(responseEntity);
8
Note
You could also register the JAX-RS entity (and any other) providers to individual WebTarget
instances produced by the client.
Then, using the fluent chain of method invocations, a resource target pointing to our MyResource
is defined, a HTTP GET request is invoked. The response entity is then read as an instance of a
MyBean type by invoking the response.readEntity method, that internally locates the registered
MyBeanMessageBodyReader and uses it for entity de-serialization.
120
JAX-RS Entity Providers
array, JAXB beans, etc.). JAX-RS defines an algorithm for selecting the most suitable provider for entity
processing. This algorithm works with information such as entity Java type and on-the-wire media type
representation of entity, and searches for the most suitable entity provider from the list of available
providers based on the supported media type declared on each provider (defined by @Produces or
@Consumes on the provider class) as well as based on the generic type declaration of the available
providers. When a list of suitable candidate entity providers is selected and sorted based on the rules
defined in JAX-RS specification, a JAX-RS runtime then it invokes isReadable or isWriteable
method respectively on each provider in the list until a first provider is found that returns true. This
provider is then used to process the entity.
The following steps describe the algorithm for selecting a MessageBodyWriter<T> (extracted from
JAX-RS with little modifications). The steps refer to the previously discussed example application. The
MessageBodyWriter<T> is searched for purpose of deserialization of MyBean entity returned from
the method getMyBean. So, type is MyBean and media type "application/xml". Let's assume the
runtime contains also registered providers, namely:
So in our case, for the resource method getMyBean the type will be MyBean.
3. Select the set of MessageBodyWriter providers that support the object and media type of the message
entity body.
In our case, for entity media type "application/xml" and type MyBean, the appropriate
MessageBodyWriter<T> will be the A, B, D and MyBeanMessageBodyWriter. The
provider C does not define the appropriate media type. A and B are fine as their type is more generic
and compatible with "application/xml".
4. Sort the selected MessageBodyWriter providers with a primary key of generic type where providers
whose generic type is the nearest superclass of the object class are sorted first and a secondary key of
media type. Additionally, JAX-RS specification mandates that custom, user registered providers have
to be sorted ahead of default providers provided by JAX-RS implementation. This is used as a tertiary
comparison key. User providers are places prior to Jersey internal providers in to the final ordered list.
5. Iterate through the sorted MessageBodyWriter<T> providers and, utilizing the isWriteable
method of each until you find a MessageBodyWriter<T> that returns true.
121
JAX-RS Entity Providers
The first provider in the list - our MyBeanMessageBodyWriter returns true as it compares
types and the types matches. If it would return false, the next provider B would by check by
invoking its isWriteable method.
6. If step 5 locates a suitable MessageBodyWriter<T> then use its writeTo method to map the
object to the entity body.
Note
JAX-RS 2.0 is incompatible with JAX-RS 1.x in one step of the entity provider selection
algorithm. JAX-RS 1.x defines sorting keys priorities in the Step 4 in exactly opposite order.
So, in JAX-RS 1.x the keys are defined in the order: primary media type, secondary type
declaration distance where custom providers have always precedence to internal providers.
If you want to force Jersey to use the algorithm compatible with JAX-RS 1.x, setup
the property (to ResourceConfig [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/server/ResourceConfig.html] or return from Application [https://jersey.java.net/apidocs-
javax.jax-rs/2.0.1/javax/ws/rs/core/Application.html] from its getProperties method):
jersey.config.workers.legacyOrdering=true
2. Identify the Java type of the parameter whose value will be mapped from the entity body. The Java
type on the server is the type of the entity parameter of the resource method. On the client it is the
Class passed to readFrom method.
3. Select the set of available MessageBodyReader<T> providers that support the media type of the
request.
4. Iterate through the selected MessageBodyReader<T> classes and, utilizing their isReadable
method, choose the first MessageBodyReader<T> provider that supports the desired combination
of Java type/media type/annotations parameters.
5. If Step 4 locates a suitable MessageBodyReader<T>, then use its readFrom method to map the
entity body to the desired Java type.
122
JAX-RS Entity Providers
To remove this burden from developers, Jersey exposes a proprietary public API that simplifies the
manipulation of entity providers. The API is defined by MessageBodyWorkers [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/message/MessageBodyWorkers.html] interface and Jersey
provides an implementation that can be injected using the @Context [https://jersey.java.net/apidocs-
javax.jax-rs/2.0.1/javax/ws/rs/core/Context.html] injection annotation. The interface declares methods for
selection of most appropriate MessageBodyReader<T> and MessageBodyWriter<T> based on
the rules defined in JAX-RS spec, methods for writing and reading entity that ensure proper and timely
invocation of interceptors and other useful methods.
123
JAX-RS Entity Providers
In the example a resource injects MessageBodyWorkers and uses it for selection of the most
appropriate MessageBodyWriter<T>. Then the writer is utilized to serialize the entity into the buffer
as XML document. The String content of the buffer is then returned. This will cause that Jersey
will not use MyBeanMessageBodyWriter to serialize the entity as it is already in the String
type (MyBeanMessageBodyWriter does not support String). Instead, a simple String-based
MessageBodyWriter<T> will be chosen and it will only serialize the String with XML to the output
entity stream by writing out the bytes of the String.
Of course, the code in the example does not bring any benefit as the entity could have been serialized by
MyBeanMessageBodyWriter by Jersey as in previous examples; the purpose of the example was to
show how to use MessageBodyWorkers in a resource method.
byte[] (*/*)
String [http://docs.oracle.com/javase/6/docs/api/java/io/String.html] (*/*)
InputStream [http://docs.oracle.com/javase/6/docs/api/java/io/InputStream.html] (*/*)
Reader [http://docs.oracle.com/javase/6/docs/api/java/io/Reader.html] (*/*)
File [http://docs.oracle.com/javase/6/docs/api/java/io/File.html] (*/*)
DataSource [http://docs.oracle.com/javase/6/docs/api/javax/activation/DataSource.html] (*/*)
Source [http://docs.oracle.com/javase/6/docs/api/javax/xml/transform/Source.html] (text/xml,
application/xml and media types of the form application/*+xml)
JAXBElement [http://docs.oracle.com/javase/6/docs/api/javax/xml/bind/JAXBElement.html] (text/
xml, application/xml and media types of the form application/*+xml)
MultivaluedMap<K,V> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
MultivaluedMap.html] (application/x-www-form-urlencoded)
Form [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Form.html] (application/
x-www-form-urlencoded)
StreamingOutput [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
StreamingOutput.html] ((*/*)) - this class can be used as an lightweight MessageBodyWriter<T>
that can be returned from a resource method
Boolean [http://docs.oracle.com/javase/6/docs/api/java/lang/Boolean.html], Character [http://
docs.oracle.com/javase/6/docs/api/java/lang/Character.html] and Number [http://docs.oracle.com/
javase/6/docs/api/java/lang/Number.html] (text/plain) - corresponding primitive types supported via
boxing/unboxing conversion
For other media type supported in jersey please see the Chapter 9, Support for Common Media Type
Representations which describes additional Jersey entity provider extensions for serialization to JSON,
124
JAX-RS Entity Providers
125
Chapter 9. Support for Common Media
Type Representations
9.1. JSON
Jersey JSON support comes as a set of extension modules where each of these modules contains
an implementation of a Feature [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
Feature.html] that needs to be registered into your Configurable [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/core/Configurable.html] instance (client/server). There are multiple frameworks that
provide support for JSON processing and/or JSON-to-Java binding. The modules listed below provide
support for JSON representations by integrating the individual JSON frameworks into Jersey. At present,
Jersey integrates with the following modules to provide JSON support:
• MOXy - JSON binding support via MOXy is a default and preferred way of supporting JSON binding
in your Jersey applications since Jersey 2.0. When JSON MOXy module is on the class-path, Jersey
will automatically discover the module and seamlessly enable JSON binding support via MOXy in your
applications. (See Section 4.3, “Auto-Discoverable Features”.)
• Jackson
• Jettison
The first method is pretty generic and allows you to map any Java Object to JSON and vice versa. The
other two approaches limit you in Java types your resource methods could produce and/or consume. JAXB
based approach is useful if you plan to utilize certain JAXB features and support both XML and JSON
representations. The last, low-level, approach gives you the best fine-grained control over the out-coming
JSON data format.
Media modules that support this approach are MOXy and Jackson
126
Support for Common Media
Type Representations
as XML representations. Another advantage is simplicity of working with such a model and availability
of the API in Java SE Platform. JAXB leverages annotated POJOs and these could be handled as simple
Java beans.
A disadvantage of JAXB based approach could be if you need to work with a very specific JSON format.
Then it might be difficult to find a proper way to get such a format produced and consumed. This is a reason
why a lot of configuration options are provided, so that you can control how JAXB beans get serialized
and de-serialized. The extra configuration options however requires you to learn more details about the
framework you are using.
Following is a very simple example of how a JAXB bean could look like.
Using the above JAXB bean for producing JSON data format from you resource method, is then as simple
as:
Notice, that JSON specific mime type is specified in @Produces annotation, and the method returns an
instance of MyJaxbBean, which JAXB is able to process. Resulting JSON in this case would look like:
{"name":"Agamemnon", "age":"32"}
A proper use of JAXB annotations itself enables you to control output JSON format to certain extent.
Specifically, renaming and omitting items is easy to do directly just by using JAXB annotations. For
example, the following example depicts changes in the above mentioned MyJaxbBean that will result in
{"king":"Agamemnon"} JSON output.
127
Support for Common Media
Type Representations
6
7 @XmlTransient
8 public int age;
9
10 // several lines removed
11 }
Media modules that support this approach are MOXy, Jackson, Jettison
The biggest advantage of these low-level APIs is that you will gain full control over the JSON format
produced and consumed. You will also be able to produce and consume very large JSON structures using
streaming JSON parser/generator APIs. On the other hand, dealing with your data model objects will
probably be a lot more complex, compared to the POJO or JAXB based binding approach. Differences
are depicted at the following code snippets.
Above you construct a simple JAXB bean, which could be written in JSON as
{"name":"Agamemnon", "age":32}
Now to build an equivalent JsonObject/JSONObject (in terms of resulting JSON expression), you
would need several more lines of code. The following example illustrates how to construct the same JSON
data using the standard Java EE 7 JSON-Processing API.
And at last, here's how the same work can be done with Jettison API.
128
Support for Common Media
Type Representations
Media modules that support the low-level JSON parsing and generating approach are Java API for JSON
Processing (JSON-P) and Jettison. Unless you have a strong reason for using the non-standard Jettison
API, we recommend you to use the new standard Java API for JSON Processing (JSON-P) API instead.
9.1.2. MOXy
9.1.2.1. Dependency
To use MOXy as your JSON provider you need to add jersey-media-moxy module to your pom.xml
file:
<dependency>
<groupId>org.glassfish.jersey.media</groupId>
<artifactId>jersey-media-moxy</artifactId>
<version>2.25.1</version>
</dependency>
If you're not using Maven make sure to have all needed dependencies (see jersey-media-moxy
[https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-media-moxy/dependencies.html]) on the
classpath.
• CommonProperties.MOXY_JSON_FEATURE_DISABLE [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/CommonProperties.html#MOXY_JSON_FEATURE_DISABLE]
• ServerProperties.MOXY_JSON_FEATURE_DISABLE [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/server/ServerProperties.html#MOXY_JSON_FEATURE_DISABLE]
• ClientProperties.MOXY_JSON_FEATURE_DISABLE [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/client/ClientProperties.html#MOXY_JSON_FEATURE_DISABLE]
Note
A manual registration of any other Jersey JSON provider feature (except for Java API
for JSON Processing (JSON-P)) disables the automated enabling and configuration of
MoxyJsonFeature.
129
Support for Common Media
Type Representations
json/MoxyJsonConfig.html] and set values of needed properties. For most common properties you can use
a particular method to set the value of the property or you can use more generic methods to set the property:
In order to make MoxyJsonConfig visible for MOXy you need to create and register
ContextResolver<T> in your client/server code.
Example 9.9. Setting properties for MOXy providers into Configurable [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Configurable.html]
new ResourceConfig()
.property(MarshallerProperties.JSON_NAMESPACE_SEPARATOR
// further configuration
130
Support for Common Media
Type Representations
There are some properties for which Jersey sets the default value
when MessageBodyReader<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/
MessageBodyReader.html] / MessageBodyWriter<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/ext/MessageBodyWriter.html] from MOXy is used and they are:
Example 9.11. Creating JAX-RS application with MOXy JSON feature enabled.
// Create JAX-RS application.
final Application application = new ResourceConfig()
.packages("org.glassfish.jersey.examples.jsonmoxy")
// The line below that registers MOXy feature can be
// omitted if FEATURE_AUTO_DISCOVERY_DISABLE is
// not disabled.
.register(MoxyJsonFeature.class)
.register(jsonConfigResolver);
9.1.2.3. Examples
Jersey provides a JSON MOXy example [https://github.com/jersey/jersey/tree/2.25.1/examples/json-
moxy] on how to use MOXy to consume/produce JSON.
<dependency>
<groupId>org.glassfish.jersey.media</groupId>
<artifactId>jersey-media-json-processing</artifactId>
<version>2.25.1</version>
131
Support for Common Media
Type Representations
</dependency>
If you're not using Maven make sure to have all needed dependencies (see jersey-media-
json-processing [https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-media-json-processing/
dependencies.html]) on the class-path.
• CommonProperties.JSON_PROCESSING_FEATURE_DISABLE [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/
CommonProperties.html#JSON_PROCESSING_FEATURE_DISABLE]
• ServerProperties.JSON_PROCESSING_FEATURE_DISABLE [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/server/
ServerProperties.html#JSON_PROCESSING_FEATURE_DISABLE]
• ClientProperties.JSON_PROCESSING_FEATURE_DISABLE [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/client/
ClientProperties.html#JSON_PROCESSING_FEATURE_DISABLE]
• JsonGenerator.PRETTY_PRINTING
("javax.json.stream.JsonGenerator.prettyPrinting")
132
Support for Common Media
Type Representations
9.1.3.3. Examples
Jersey provides a JSON Processing example [https://github.com/jersey/jersey/tree/2.25.1/examples/json-
processing-webapp] on how to use JSON-Processing to consume/produce JSON.
<dependency>
<groupId>org.glassfish.jersey.media</groupId>
<artifactId>jersey-media-json-jackson</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.media</groupId>
<artifactId>jersey-media-json-jackson1</artifactId>
<version>2.25.1</version>
</dependency>
If you're not using Maven make sure to have all needed dependencies (see jersey-
media-json-jackson [https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-media-json-jackson/
dependencies.html] or jersey-media-json-jackson1 [https://jersey.java.net/project-info/2.25.1/jersey/
project/jersey-media-json-jackson1/dependencies.html]) on the classpath.
In order to use Jackson as your JSON (JAXB/POJO) provider you need to register JacksonFeature [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/jackson/JacksonFeature.html] (Jackson1Feature
[https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/jackson1/Jackson1Feature.html]) and a
133
Support for Common Media
Type Representations
Example 9.16. Creating JAX-RS application with Jackson JSON feature enabled.
1 // Create JAX-RS application.
2 final Application application = new ResourceConfig()
3 .packages("org.glassfish.jersey.examples.jackson")
4 .register(MyObjectMapperProvider.class) // No need to register this pr
5 .register(JacksonFeature.class);
9.1.4.3. Examples
Jersey provides JSON Jackson (2.x) example [https://github.com/jersey/jersey/tree/2.25.1/examples/json-
jackson] and JSON Jackson (1.x) example [https://github.com/jersey/jersey/tree/2.25.1/examples/json-
jackson1] showing how to use Jackson to consume/produce JSON.
134
Support for Common Media
Type Representations
9.1.5. Jettison
JAXB approach for (de)serializing JSON in Jettison module provides, in addition to using pure JAXB,
configuration options that could be set on an JettisonConfig [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/jettison/JettisonConfig.html] instance. The instance could be then further
used to create a JettisonJaxbContext [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
jettison/JettisonJaxbContext.html], which serves as a main configuration point in this area. To
pass your specialized JettisonJaxbContext to Jersey, you will finally need to implement
a JAXBContext ContextResolver<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/
ContextResolver.html] (see below).
9.1.5.1. Dependency
To use Jettison as your JSON provider you need to add jersey-media-json-jettison module
to your pom.xml file:
<dependency>
<groupId>org.glassfish.jersey.media</groupId>
<artifactId>jersey-media-json-jettison</artifactId>
<version>2.25.1</version>
</dependency>
If you're not using Maven make sure to have all needed dependencies (see jersey-
media-json-jettison [https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-media-json-jettison/
dependencies.html]) on the classpath.
• BADGERFISH
You might want to use one of these notations, when working with more complex XML documents. Namely
when you deal with multiple XML namespaces in your JAXB beans.
Individual notations and their further configuration options are described below. Rather then explaining
rules for mapping XML constructs into JSON, the notations will be described using a simple example.
Following are JAXB beans, which will be used.
Example 9.17. JAXB beans for JSON supported notations description, simple
address bean
1 @XmlRootElement
2 public class Address {
3 public String street;
4 public String town;
5
6 public Address(){}
7
8 public Address(String street, String town) {
135
Support for Common Media
Type Representations
9 this.street = street;
10 this.town = town;
11 }
12 }
Example 9.18. JAXB beans for JSON supported notations description, contact bean
1 @XmlRootElement
2 public class Contact {
3
4 public int id;
5 public String name;
6 public List<Address> addresses;
7
8 public Contact() {};
9
10 public Contact(int id, String name, List<Address> addresses) {
11 this.name = name;
12 this.id = id;
13 this.addresses =
14 (addresses != null) ? new LinkedList<Address>(addresses) : null;
15 }
16 }
Following text will be mainly working with a contact bean initialized with:
Example 9.19. JAXB beans for JSON supported notations description, initialization
1 Address[] addresses = {new Address("Long Street 1", "Short Village")};
2 Contact contact = new Contact(2, "Bob", Arrays.asList(addresses));
I.e. contact bean with id=2, name="Bob" containing a single address (street="Long Street 1",
town="Short Village").
All below described configuration options are documented also in api-docs at JettisonConfig [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/jettison/JettisonConfig.html].
1 ...
2 @XmlElement(namespace="http://example.com")
3 public int id;
4 ...
Then you simply configure a mapping from XML namespace into JSON prefix as follows:
Example 9.20. XML namespace to JSON mapping configuration for Jettison based
mapped notation
1 Map<String,String> ns2json = new HashMap<String, String>();
2 ns2json.put("http://example.com", "example");
136
Support for Common Media
Type Representations
Example 9.21. JSON expression with XML namespaces mapped into JSON
1 {
2 "contact":{
3 "example.id":2,
4 "name":"Bob",
5 "addresses":{
6 "street":"Long Street 1",
7 "town":"Short Village"
8 }
9 }
10 }
Please note, that id item became example.id based on the XML namespace mapping. If you have
more XML namespaces in your XML, you will need to configure appropriate mapping for all of them.
Another configurable option introduced in Jersey version 2.2 is related to serialization of JSON arrays
with Jettison's mapped notation. When serializing elements representing single item lists/arrays, you might
want to utilise the following Jersey configuration method to explicitly name which elements to treat as
arrays no matter what the actual content is.
Example 9.22. JSON Array configuration for Jettison based mapped notation
1 context = new JettisonJaxbContext(
2 JettisonConfig.mappedJettison().serializeAsArray("name").build(),
3 types);
Resulting JSON will look like in the example below, unimportant lines removed for sanity.
Example 9.23. JSON expression with JSON arrays explicitly configured via Jersey
1 {
2 "contact":{
3 ...
4 "name":["Bob"],
5 ...
6 }
7 }
JettisonConfig.badgerFish().build()
137
Support for Common Media
Type Representations
@Override
public JAXBContext getContext(Class<?> objectType) {
return (types.contains(objectType)) ? context : null;
}
}
138
Support for Common Media
Type Representations
.register(JettisonFeature.class)
.build();
Example 9.27. Creating JAX-RS application with Jettison JSON feature enabled.
// Create JAX-RS application.
final Application application = new ResourceConfig()
.packages("org.glassfish.jersey.examples.jettison")
.register(JaxbContextResolver.class) // No need to register this provider
.register(JettisonFeature.class);
9.1.5.4. Examples
Jersey provides an JSON Jettison example [https://github.com/jersey/jersey/tree/2.25.1/examples/json-
jettison] on how to use Jettison to consume/produce JSON.
• Resource method, which should return wrapped JSON, needs to be annotated with @JSONP [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/JSONP.html] annotation.
• MessageBodyWriter<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/
MessageBodyWriter.html] for application/json media type, which also accepts the return type
of the resource method, needs to be registered (see JSON section of this chapter).
• User's request has to contain Accept header with one of the JavaScript media types defined (see below).
Assume that we have registered a JSON providers and that the JaxbBean looks like:
public JaxbBean() {}
139
Support for Common Media
Type Representations
When you send a GET request with Accept header set to application/javascript you'll get a
result entity that look like:
callback({
"value" : "jsonp",
})
There are, of course, ways to configure wrapping method of the returned entity which defaults to
callback as you can see in the previous example. @JSONP has two parameters that can be configured:
callback and queryParam. callback stands for the name of the JavaScript callback function
defined by the application. The second parameter, queryParam, defines the name of the query parameter
holding the name of the callback function to be used (if present in the request). Value of queryParam
defaults to __callback so even if you do not set the name of the query parameter yourself, client can
always affect the result name of the wrapping JavaScript callback method.
Note
queryParam value (if set) always takes precedence over callback value.
will return
eval({
"value" : "jsonp",
})
and the
140
Support for Common Media
Type Representations
will return
alert({
"value" : "jsonp",
})
Example. You can take a look at a provided JSON with Padding example [https://github.com/jersey/
jersey/tree/2.25.1/examples/json-with-padding].
9.2. XML
As you probably already know, Jersey uses MessageBodyWriter<T>s and
MessageBodyReader<T>s to parse incoming requests and create outgoing responses. Every user can
create its own representation but... this is not recommended way how to do things. XML is proven standard
for interchanging information, especially in web services. Jerseys supports low level data types used for
direct manipulation and JAXB XML entities.
141
Support for Common Media
Type Representations
23 }
Both MessageBodyWriter<T> and MessageBodyReader<T> are used in this case, all we need
is a POST request with some XML document as a request entity. To keep this as simple as possible only
root element with no content will be sent: "<test />". You can create JAX-RS client to do that or use
some other tool, for example curl:
You should get exactly the same XML from our service as is present in the request; in this case, XML
headers are added to response but content stays. Feel free to iterate through all resources.
Lets start with simple example. Lets say we have class Planet and service which produces "Planets".
You can see there is some extra annotation declared on Planet class, particularly @XmlRootElement
[http://jaxb.java.net/nonav/2.2.7/docs/api/javax/xml/bind/annotation/XmlRootElement.html]. This is an
JAXB annotation which maps java classes to XML elements. We don't need to specify
anything else, because Planet is very simple class and all fields are public. In this case,
142
Support for Common Media
Type Representations
XML element name will be derived from the class name or you can set the name property:
@XmlRootElement(name="yourName").
which might be exactly what we want... or not. Or we might not really care, because we can use JAX-RS
client for making requests to this resource and this is easy as:
There is pre-created WebTarget object which points to our applications context root and we simply add
path (in our case its planet), accept header (not mandatory, but service could provide different content
based on this header; for example text/html can be served for web browsers) and at the end we specify
that we are expecting Planet class via GET request.
There may be need for not just producing XML, we might want to consume it as well.
After valid request is made, service will print out string representation of Planet, which can look like
Planet{id=2, name='Mars', radius=1.51}. With JAX-RS client you can do:
webTarget.path("planet").post(planet);
If there is a need for some other (non default) XML representation, other JAXB annotations would need
to be used. This process is usually simplified by generating java source from XML Schema which is done
by xjc which is XML to java compiler and it is part of JAXB.
9.2.3. POJOs
Sometimes you can't / don't want to add JAXB annotations to source code and you still want to have
resources consuming and producing XML representation of your classes. In this case, JAXBElement
[http://jaxb.java.net/nonav/2.2.7/docs/api/javax/xml/bind/JAXBElement.html] class should help you.
Let's redo planet resource but this time we won't have an @XmlRootElement [http://jaxb.java.net/
nonav/2.2.7/docs/api/javax/xml/bind/annotation/XmlRootElement.html] annotation on Planet class.
143
Support for Common Media
Type Representations
As you can see, everything is little more complicated with JAXBElement. This is because now you need
to explicitly set element name for Planet class XML representation. Client side is even more complicated
than server side because you can't do JAXBElement<Planet> so JAX-RS client API provides way
how to workaround it by declaring subclass of GenericType<T>.
144
Support for Common Media
Type Representations
Sample above shows simple JAXBContext creation, all you need to do is put this @Provider annotated
class somewhere where Jersey can find it. Users sometimes have problems with using provider classes on
client side, so just to reminder - you have to declare them in the client config (client does not do anything
like package scanning done by server).
9.2.5. MOXy
If you want to use MOXy [http://www.eclipse.org/eclipselink/moxy.php] as your JAXB implementation
instead of JAXB RI you have two options. You can either use the standard JAXB mechanisms to
define the JAXBContextFactory from which a JAXBContext instance would be obtained (for
more on this topic, read JavaDoc on JAXBContext [http://jaxb.java.net/nonav/2.2.7/docs/api/javax/xml/
bind/JAXBContext.html]) or you can add jersey-media-moxy module to your project and register/
configure MoxyXmlFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/moxy/xml/
MoxyXmlFeature.html] class/instance in the Configurable [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/core/Configurable.html].
145
Support for Common Media
Type Representations
2 .packages("org.glassfish.jersey.examples.xmlmoxy")
3 .register(MoxyXmlFeature.class);
9.3. Multipart
9.3.1. Overview
The classes in this module provide an integration of multipart/* request and response bodies in a
JAX-RS runtime environment. The set of registered providers is leveraged, in that the content type for a
body part of such a message reuses the same MessageBodyReader<T>/MessageBodyWriter<T>
implementations as would be used for that content type as a standalone entity.
• The MIME-Version: 1.0 HTTP header is included on generated responses. It is accepted, but not
required, on processed requests.
• A MessageBodyReader<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/
MessageBodyReader.html] implementation for consuming MIME MultiPart entities.
9.3.1.1. Dependency
To use multipart features you need to add jersey-media-multipart module to your pom.xml file:
<dependency>
<groupId>org.glassfish.jersey.media</groupId>
<artifactId>jersey-media-multipart</artifactId>
<version>2.25.1</version>
146
Support for Common Media
Type Representations
</dependency>
If you're not using Maven make sure to have all needed dependencies (see jersey-media-multipart
[https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-media-multipart/dependencies.html]) on
the class-path.
9.3.1.2. Registration
Before you can use capabilities of the jersey-media-multipart module in your client/server code,
you need to register MultiPartFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
media/multipart/MultiPartFeature.html].
9.3.1.3. Examples
Jersey provides a Multipart Web Application Example [https://github.com/jersey/jersey/tree/2.25.1/
examples/multipart-webapp] on how to use multipart features.
9.3.2. Client
MultiPart [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/multipart/
MultiPart.html] class (or it's subclasses) can be used as an entry point to using jersey-
media-multipart module on the client side. This class represents a MIME multipart
message [http://en.wikipedia.org/wiki/MIME#Multipart_messages] and is able to hold an arbitrary
number of BodyPart [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/multipart/
BodyPart.html]s. Default media type is multipart/mixed [http://en.wikipedia.org/wiki/MIME#Mixed] for
MultiPart entity and text/plain for BodyPart.
If you send a multiPartEntity to the server the entity with Content-Type header in HTTP
message would look like (don't forget to register a JSON provider):
147
Support for Common Media
Type Representations
--Boundary_1_829077776_1369128119878
Content-Type: text/plain
hello
--Boundary_1_829077776_1369128119878
Content-Type: application/xml
{"value":"json"}
--Boundary_1_829077776_1369128119878--
When working with forms (e.g. media type multipart/form-data) and various fields in them, there
is a more convenient class to be used - FormDataMultiPart [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/media/multipart/FormDataMultiPart.html]. It automatically sets the media type for the
FormDataMultiPart entity to multipart/form-data and Content-Disposition header
to FormDataBodyPart body parts.
--Boundary_1_511262261_1369143433608
Content-Type: text/plain
Content-Disposition: form-data; name="hello"
hello
--Boundary_1_511262261_1369143433608
Content-Type: application/xml
Content-Disposition: form-data; name="xml"
148
Support for Common Media
Type Representations
{"value":"json"}
--Boundary_1_511262261_1369143433608--
A common use-case for many users is sending files from client to server. For this purpose you
can use classes from org.glassfish.jersey.jersey.media.multipart package, such
as FileDataBodyPart [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/multipart/
file/FileDataBodyPart.html] or StreamDataBodyPart [https://jersey.java.net/apidocs/2.25.1/jersey/org/
glassfish/jersey/media/multipart/file/StreamDataBodyPart.html].
Warning
Do not use ApacheConnectorProvider nor GrizzlyConnectorProvider neither
JettyConnectorProvider connector implementations with Jersey Multipart features. See
Header modification issue warning for more details.
9.3.3. Server
Returning a multipart response from server to client is not much different from the parts described in the
client section above. To obtain a multipart entity, sent by a client, in the application you can use two
approaches:
149
Support for Common Media
Type Representations
@Produces("multipart/mixed")
public MultiPart post(final FormDataMultiPart multiPart) {
return multiPart;
}
This annotation in conjunction with the media type multipart/form-data should be used for
submitting and consuming forms that contain files, non-ASCII data, and binary data.
The type of the annotated parameter can be one of the following (for more detailed description see javadoc
to @FormDataParam [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/multipart/
FormDataParam.html]):
• FormDataBodyPart - The value of the parameter will be the first named body part or null if such
a named body part is not present.
• A List or Collection of FormDataBodyPart. The value of the parameter will one or more
named body parts with the same name or null if such a named body part is not present.
• A type for which a message body reader is available given the media type of the first named body part.
The value of the parameter will be the result of reading using the message body reader given the type
T, the media type of the named part, and the bytes of the named body part as input.
If there is no named part present and there is a default value present as declared by @DefaultValue
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/DefaultValue.html] then the media type
will be set to text/plain. The value of the parameter will be the result of reading using the message
body reader given the type T, the media type text/plain, and the UTF-8 encoded bytes of the default
value as input.
If there is no message body reader available and the type T conforms to a type specified
by @FormParam [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/FormParam.html] then
processing is performed as specified by @FormParam, where the values of the form parameter are
String instances produced by reading the bytes of the named body parts utilizing a message body
reader for the String type and the media type text/plain.
150
Support for Common Media
Type Representations
// ...
}
In the example above the server consumes a multipart/form-data request entity body that contains
one optional named body part enabled and two required named body parts data and file.
The optional part enabled is processed as a boolean value, if the part is absent then the value will
be true.
The part data is processed as a JAXB bean and contains some meta-data about the following part.
The part file is a file that is uploaded, this is processed as an InputStream. Additional
information about the file from the Content-Disposition header can be accessed by the parameter
fileDisposition.
Tip
@FormDataParam annotation can be also used on fields.
151
Chapter 10. Filters and Interceptors
10.1. Introduction
This chapter describes filters, interceptors and their configuration. Filters and interceptors can be used
on both sides, on the client and the server side. Filters can modify inbound and outbound requests and
responses including modification of headers, entity and other request/response parameters. Interceptors are
used primarily for modification of entity input and output streams. You can use interceptors for example
to zip and unzip output and input entity streams.
10.2. Filters
Filters can be used when you want to modify any request or response parameters like headers. For example
you would like to add a response header "X-Powered-By" to each generated response. Instead of adding
this header in each resource method you would use a response filter to add this header.
There are filters on the server side and the client side.
Server filters:
ContainerRequestFilter [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/container/
ContainerRequestFilter.html]
ContainerResponseFilter [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/container/
ContainerResponseFilter.html]
Client filters:
ClientRequestFilter [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/
ClientRequestFilter.html]
ClientResponseFilter [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/
ClientResponseFilter.html]
152
Filters and Interceptors
15 }
The filter() method has two arguments, the container request and container response.
The ContainerRequestContext [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/container/
ContainerRequestContext.html] is accessible only for read only purposes as the filter is executed already in
response phase. The modifications can be done in the ContainerResponseContext [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/container/ContainerResponseContext.html].
The request filter is similar to the response filter but does not have access to the ContainerResponseContext
as no response is accessible yet. Response filter inherits from ContainerResponseFilter [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/container/ContainerResponseFilter.html]. Request
filter is executed before the resource method is run and before the response is created. The filter has
possibility to manipulate the request parameters including request headers or entity.
153
Filters and Interceptors
the standard processing chain. When the filter method is finished the response passed as a parameter
to the abortWith method is used to respond to the request. Response filters, if any are registered, will
be executed and will have possibility to process the aborted response.
To overcome the above described limitation, there is a possibility to mark a server request filter as a pre-
matching filter, i.e. to annotate the filter class with the @PreMatching [https://jersey.java.net/apidocs-
javax.jax-rs/2.0.1/javax/ws/rs/container/PreMatching.html] annotation. Pre-matching filters are request
filters that are executed before the request matching is started. Thanks to this, pre-matching request filters
have the possibility to influence which method will be matched. Such a pre-matching request filter example
is shown here:
The PreMatchingFilter is a simple pre-matching filter which changes all PUT HTTP methods to
POST. This might be useful when you want to always handle these PUT and POST HTTP methods
with the same Java code. After the PreMatchingFilter has been invoked, the rest of the request
processing will behave as if the POST HTTP method was originally used. You cannot do this in post-
matching filters (standard filters without @PreMatching annotation) as the resource method is already
matched (selected). An attempt to tweak the original HTTP method in a post-matching filter would cause
an IllegalArgumentException.
As written above, pre-matching filters can fully influence the request matching process, which means you
can even modify request URI in a pre-matching filter by invoking the setRequestUri(URI) method
of ContainerRequestFilter so that a different resource would be matched.
Like in post-matching filters you can abort a response in pre-matching filters too.
154
Filters and Interceptors
The CheckRequestFilter validates the outgoing request. It is checked for presence of a Client-
Name header. If the header is not present the request will be aborted with a made up response with an
appropriate code and message in the entity body. This will cause that the original request will not be
effectively sent to the server but the actual invocation will still end up with a response as if it would be
generated by the server side. If there would be any client response filter it would be executed on this
response.
To summarize the workflow, for any client request invoked from the client API the client
request filters (ClientRequestFilter [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/
ClientRequestFilter.html]) are executed that could manipulate the request. If not aborted, the outcoming
request is then physically sent over to the server side and once a response is received back from the server
the client response filters (ClientResponseFilter [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/
ws/rs/client/ClientResponseFilter.html]) are executed that might again manipulate the returned response.
Finally the response is passed back to the code that invoked the request. If the request was aborted in any
client request filter then the client/server communication is skipped and the aborted response is used in
the response filters.
10.3. Interceptors
Interceptors share a common API for the server and the client side. Whereas filters are primarily intended to
manipulate request and response parameters like HTTP headers, URIs and/or HTTP methods, interceptors
are intended to manipulate entities, via manipulating entity input/output streams. If you for example need
to encode entity body of a client request then you could implement an interceptor to do the work for you.
155
Filters and Interceptors
streams. These are the streams coming from the "wire". So, using a reader interceptor you can manipulate
request entity stream on the server side (where an entity is read from the client request) and response entity
stream on the client side (where an entity is read from the server response). Writer interceptors are used for
cases where entity is written to the "wire" which on the server means when writing out a response entity
and on the client side when writing request entity for a request to be sent out to the server. Writer and
reader interceptors are executed before message body readers or writers are executed and their primary
intention is to wrap the entity streams that will be used in message body reader and writers.
The following example shows a writer interceptor that enables GZIP compression of the whole entity body.
The interceptors wrap the streams and they itself work as wrappers. This means that each interceptor
is a wrapper of another interceptor and it is responsibility of each interceptor implementation
to call the wrapped interceptor. This is achieved by calling the proceed() method on the
WriterInterceptorContext. This method will call the next registered interceptor in the chain,
so effectivelly this will call all remaining registered interceptors. Calling proceed() from the last
interceptor in the chain will call the appropriate message body reader. Therefore every interceptor must call
the proceed() method otherwise the entity would not be written. The wrapping principle is reflected
also in the method name, aroundWriteTo, which says that the method is wrapping the writing of the entity.
156
Filters and Interceptors
The GZIPReaderInterceptor wraps the original input stream with the GZIPInputStream.
All further reads from the entity stream will cause that data will be decompressed by this stream.
The interceptor method aroundReadFrom() must return an entity. The entity is returned from
the proceed method of the ReaderInterceptorContext [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/ext/ReaderInterceptorContext.html]. The proceed method internally calls the wrapped
interceptor which must also return an entity. The proceed method invoked from the last interceptor in
the chain calls message body reader which deserializes the entity end returns it. Every interceptor can
change this entity if there is a need but in the most cases interceptors will just return the entity as returned
from the proceed method.
As already mentioned above, interceptors should be primarily used to manipulate entity body. Similar
to methods exposed by WriterInterceptorContext the ReaderInterceptorContext
introduces a set of methods for modification of request/response properties like HTTP headers, URIs and/
or HTTP methods (excluding getters and setters for entity as entity has not been read yet). Again the
same rules as for WriterInterceptor applies for changing these properties (change only properties
in order to influence reading of an entity).
1. Client request invoked: The POST request with attached entity is built on the client and invoked.
2. ClientRequestFilters: client request filters are executed on the client and they manipulate the request
headers.
3. Client WriterInterceptor: As the request contains an entity, writer interceptor registered on the
client is executed before a MessageBodyWriter is executed. It wraps the entity output stream with the
GZipOutputStream.
4. Client MessageBodyWriter: message body writer is executed on the client which serializes the entity
into the new GZipOutput stream. This stream zips the data and sends it to the "wire".
5. Server: server receives a request. Data of entity is compressed which means that pure read from the
entity input stream would return compressed data.
157
Filters and Interceptors
10.Server MessageBodyReader: server message body reader is executed and it deserializes the entity from
new GZipInputStream (get from the context). This means the reader will read unzipped data and not
the compressed data from the "wire".
11.Server resource method is executed: the deserialized entity object is passed to the matched resource
method as a parameter. The method returns this entity as a response entity.
12.Server ContainerResponseFilters are executed: response filters are executed on the server and they
manipulate the response headers. This include all global bound filters (without name binding) and all
filters name-bound to the resource method.
13.Server WriterInterceptor: is executed on the server. It wraps the original output stream with a
new GZIPOuptutStream. The original stream is the stream that "goes to the wire" (output stream for
response from the underlying server container).
14.Server MessageBodyWriter: message body writer is executed on the server which serializes the entity
into the GZIPOutputStream. This stream compresses the data and writes it to the original stream which
sends this compressed data back to the client.
15.Client receives the response: the response contains compressed entity data.
16.Client ClientResponseFilters: client response filters are executed and they manipulate the response
headers.
17.Client response is returned: the javax.ws.rs.core.Response is returned from the request invocation.
18.Client code calls response.readEntity(): read entity is executed on the client to extract the entity from
the response.
20.Client MessageBodyReaders: client message body reader is invoked which reads decompressed data
from GZIPInputStream and deserializes the entity.
It is worth to mention that in the scenario above the reader and writer interceptors are invoked only if the
entity is present (it does not make sense to wrap entity stream when no entity will be written). The same
behaviour is there for message body readers and writers. As mentioned above, interceptors are executed
before the message body reader/writer as a part of their execution and they can wrap the input/output
stream before the entity is read/written. There are exceptions when interceptors are not run before message
body reader/writers but this is not the case of simple scenario above. This happens for example when the
entity is read many times from client response using internal buffering. Then the data are intercepted only
once and kept 'decoded' in the buffer.
158
Filters and Interceptors
Filter or interceptor can be assigned to a resource method using the @NameBinding [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/NameBinding.html] annotation. The annotation is used as meta
annotation for other user implemented annotations that are applied to a providers and resource methods.
See the following example:
159
Filters and Interceptors
The example above defines a new @Compress annotation which is a name binding annotation
as it is annotated with @NameBinding. The @Compress is applied on the resource method
getVeryLongString() and on the interceptor GZIPWriterInterceptor. The interceptor will
be executed only if any resource method with such a annotation will be executed. In our example case
the interceptor will be executed only for the getVeryLongString() method. The interceptor will not
be executed for method getHello(). In this example the reason is probably clear. We would like to
compress only long data and we do not need to compress the short response of "Hello World!".
Name binding can be applied on a resource class. In the example HelloWorldResource would be
annotated with @Compress. This would mean that all resource methods will use compression in this case.
There might be many name binding annotations defined in an application. When any provider (filter or
interceptor) is annotated with more than one name binding annotation, then it will be executed for resource
methods which contain ALL these annotations. So, for example if our interceptor would be annotated with
another name binding annotation @GZIP then the resource method would need to have both annotations
attached, @Compress and @GZIP, otherwise the interceptor would not be executed. Based on the previous
paragraph we can even use the combination when the resource method getVeryLongString() would
be annotated with @Compress and resource class HelloWorldResource would be annotated from
with @GZIP. This would also trigger the interceptor as annotations of resource methods are aggregated
from resource method and from resource class. But this is probably just an edge case which will not be
used so often.
Note that global filters are executed always, so even for resource methods which have any name binding
annotations.
160
Filters and Interceptors
10 @Produces("text/plain")
11 public String getHello() {
12 return "Hello World!";
13 }
14
15 @GET
16 @Path("too-much-data")
17 public String getVeryLongString() {
18 String str = ... // very long string
19 return str;
20 }
21 }
22
23 // This dynamic binding provider registers GZIPWriterInterceptor
24 // only for HelloWorldResource and methods that contain
25 // "VeryLongString" in their name. It will be executed during
26 // application initialization phase.
27 public class CompressionDynamicBinding implements DynamicFeature {
28
29 @Override
30 public void configure(ResourceInfo resourceInfo, FeatureContext context) {
31 if (HelloWorldResource.class.equals(resourceInfo.getResourceClass())
32 && resourceInfo.getResourceMethod()
33 .getName().contains("VeryLongString")) {
34 context.register(GZIPWriterInterceptor.class);
35 }
36 }
37 }
The example contains one HelloWorldResource which is known from the previous
name binding example. The difference is in the getVeryLongString method, which now
does not define the @Compress name binding annotations. The binding is done using the
provider which implements DynamicFeature [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/
rs/container/DynamicFeature.html] interface. The interface defines one configure method with two
arguments, ResourceInfo and FeatureContext. ResourceInfo contains information about
the resource and method to which the binding can be done. The configure method will be executed
once for each resource method that is defined in the application. In the example above the provider
will be executed twice, once for the getHello() method and once for getVeryLongString()
( once the resourceInfo will contain information about getHello() method and once it will point to
getVeryLongString()). If a dynamic binding provider wants to register any provider for the actual resource
method it will do that using provided FeatureContext which extends JAX-RS Configurable API.
All methods for registration of filter or interceptor classes or instances can be used. Such dynamically
registered filters or interceptors will be bound only to the actual resource method. In the example above
the GZIPWriterInterceptor will be bound only to the method getVeryLongString() which
will cause that data will be compressed only for this method and not for the method getHello(). The
code of GZIPWriterInterceptor is in the examples above.
Note that filters and interceptors registered using dynamic binding are only additional filters run for the
resource method. If there are any name bound providers or global providers they will still be executed.
10.7. Priorities
In case you register more filters and interceptors you might want to define an exact order in which
they should be invoked. The order can be controlled by the @Priority annotation defined by the
161
Filters and Interceptors
It's a good practice to assign a priority to filters and interceptors. Use Priorities [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Priorities.html] class which defines standardized
priorities in JAX-RS for different usages, rather than inventing your own priorities. So, when you
for example write an authentication filter you would assign a priority 1000 which is the value of
Priorities.AUTHENTICATION. The following example shows the filter from the beginning of this
chapter with a priority assigned.
As this is a response filter and response filters are executed in the reverse order, any other filter with priority
lower than 3000 (Priorities.HEADER_DECORATOR is 3000) will be executed after this filter. So,
for example AUTHENTICATION filter (priority 1000) would be run after this filter.
162
Chapter 11. Asynchronous Services
and Clients
This chapter describes the usage of asynchronous API on the client and server side. The term async will
be sometimes used interchangeably with the term asynchronous in this chapter.
The following example shows a simple asynchronous resource method defined using the new JAX-RS
async API:
In the example above, a resource AsyncResource with one GET method asyncGet is defined.
The asyncGet method injects a JAX-RS AsyncResponse [https://jersey.java.net/apidocs-javax.jax-
163
Asynchronous Services and Clients
It is important to note that the asynchronous response (asyncResponse in the example) does not need to
be resumed from the thread started from the resource method. The asynchronous response can be resumed
even from different request processing thread as it is shown in the the example of the AsyncResponse
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/container/AsyncResponse.html] javadoc. In
the javadoc example the async response suspended from the GET method is resumed later on from the
POST method. The suspended async response is passed between requests using a static field and is resumed
from the other resource method running on a different request processing thread.
Imagine now a situation when there is a long delay between two requests and you would not like to let the
client wait for the response "forever" or at least for an unacceptable long time. In asynchronous processing
model, occurrences of such situations should be carefully considered with client connections not being
automatically closed when the processing method returns and the response needs to be resumed explicitly
based on an event that may actually even never happen. To tackle these situations asynchronous timeouts
can be used.
164
Asynchronous Services and Clients
12
13 new Thread(new Runnable() {
14
15 @Override
16 public void run() {
17 String result = veryExpensiveOperation();
18 asyncResponse.resume(result);
19 }
20
21 private String veryExpensiveOperation() {
22 // ... very expensive operation that typically finishes within 20 s
23 }
24 }).start();
25 }
By default, there is no timeout defined on the suspended AsyncResponse instance. A custom timeout
and timeout event handler may be defined using setTimeoutHandler(TimeoutHandler) and
setTimeout(long, TimeUnit) methods. The setTimeoutHandler(TimeoutHandler)
method defines the handler that will be invoked when timeout is reached. The handler resumes
the response with the response code 503 (from Response.Status.SERVICE_UNAVAILABLE). A
timeout interval can be also defined without specifying a custom timeout handler (using just the
setTimeout(long, TimeUnit) method). In such case the default behaviour of Jersey runtime is to
throw a ServiceUnavailableException that gets mapped into 503, "Service Unavailable" HTTP
error response, as defined by the JAX-RS specification.
• CompletionCallback [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/container/
CompletionCallback.html] that is executed when request finishes or fails, and
• ConnectionCallback [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/container/
ConnectionCallback.html] executed when a connection to a client is closed or lost.
165
Asynchronous Services and Clients
17 numberOfFailures++;
18 lastException = throwable;
19 }
20 }
21 });
22
23 new Thread(new Runnable() {
24 @Override
25 public void run() {
26 String result = veryExpensiveOperation();
27 asyncResponse.resume(result);
28 }
29
30 private String veryExpensiveOperation() {
31 // ... very expensive operation
32 }
33 }).start();
34 }
35 }
The AsyncResponse register(...) method is overloaded and offers options to register a single
callback as an Object (in the example), as a Class or multiple callbacks using varags.
As some async requests may take long time to process the client may decide to terminate it's connection
to the server before the response has been resumed or before it has been fully written to the client. To deal
with these use cases a ConnectionCallback can be used. This callback will be executed only if the
connection was prematurely terminated or lost while the response is being written to the back client. Note
that this callback will not be invoked when a response is written successfully and the client connection is
closed as expected. See javadoc of ConnectionCallback [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/container/ConnectionCallback.html] for more information.
166
Asynchronous Services and Clients
167
Asynchronous Services and Clients
container response but does not close the client connection yet and waits for the response data to be written
to the chunked output. New thread in a loop calls the method getNextString() which returns a next
String or null if no other String exists (the method could for example load latest data from the database).
Returned Strings are written to the chunked output. Such a written chunks are internally written to the
container response and client can read them. At the end the chunked output is closed which determines
the end of the chunked response. Please note that you must close the output explicitly in order to close the
client connection as Jersey does not implicitly know when you are finished with writing the chunks.
A chunked output can be processed also from threads created from another request as it is explained in the
sections above. This means that one resource method may e.g. only return a ChunkedOutput instance
and other resource method(s) invoked from another request thread(s) can write data into the chunked output
and/or close the chunked response.
The difference against synchronous invocation is that the http method call get()
is not called on SyncInvoker [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/
SyncInvoker.html] but on AsyncInvoker [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/
rs/client/AsyncInvoker.html]. The AsyncInvoker is returned from the call of method
Invocation.Builder.async() as shown above. AsyncInvoker offers methods similar to
SyncInvoker only these methods do not return a response synchronously. Instead a Future<...>
representing response data is returned. These method calls also return immediately without waiting
for the actual request to complete. In order to get the response of the invoked get() method, the
responseFuture.get() is invoked which waits for the response to be finished (this call is blocking
as defined by the Java SE Future contract).
Asynchronous Client API in JAX-RS is fully integrated in the fluent JAX-RS Client API flow, so that the
async client-side invocations can be written fluently just like in the following example:
To work with asynchronous results on the client-side, all standard Future API facilities can be used. For
example, you can use the isDone() method to determine whether a response has finished to avoid the
use of a blocking call to Future.get().
168
Asynchronous Services and Clients
As with the synchronous client API, you can retrieve the response entity as a Java type directly without
requesting a Response first. In case of an InvocationCallback, you need to set its generic type
to the expected response entity type instead of using the Response type as demonstrated in the example
below:
169
Asynchronous Services and Clients
14 System.out.println(entityFuture.get());
Here, the generic type of the invocation callback information is used to unmarshall the HTTP response
content into a desired Java type.
Important
Please note that in this case the method failed(Throwable throwable) would be
invoked even for cases when a server responds with a non HTTP-2xx HTTP error code. This is
because in this case the user does not have any other means of finding out that the server returned
an error response.
You can, of course, process input on the client as a standard input stream but if you would like to
leverage Jersey infrastructure to provide support of translating message chunk data into Java types using a
ChunkedInput is much more straightforward. See the usage of the ChunkedInput in the following
example:
The response is retrieved in a standard way from the server. The entity is read as a ChunkedInput
entity. In order to do that the GenericEntity<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/
ws/rs/core/GenericEntity.html] is used to preserve a generic information at run time. If you would not
use GenericEntity<T>, Java language generic type erasure would cause that the generic information
would get lost at compile time and an exception would be thrown at run time complaining about the missing
chunk type definition.
In the next lines in the example, individual chunks are being read from the response. Chunks can come
with some delay, so they will be written to the console as they come from the server. After receiving last
chunk the null will be returned from the read() method. This will mean that the server has sent the last
chunk and closed the connection. Note that the read() is a blocking operation and the invoking thread
is blocked until a new chunk comes.
Writing chunks with ChunkedOutput is simple, you only call method write() which writes exactly
one chunk to the output. With the input reading it is slightly more complicated. The ChunkedInput does
not know how to distinguish chunks in the byte stream unless being told by the developer. In order to define
custom chunks boundaries, the ChunkedInput offers possibility to register a ChunkParser [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/ChunkParser.html] which reads chunks
from the input stream and separates them. Jersey provides several chunk parser implementation and you
170
Asynchronous Services and Clients
can implement your own parser to separate your chunks if you need. In our example above the default
parser provided by Jersey is used that separates chunks based on presence of a \r\n delimiting character
sequence.
Each incoming input stream is firstly parsed by the ChunkParser, then each chunk is processed
by the proper MessageBodyReader<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/
MessageBodyReader.html]. You can define the media type of chunks to aid the selection of a proper
MessageBodyReader<T> in order to read chunks correctly into the requested entity types (in our case
into Strings).
171
Chapter 12. URIs and Links
12.1. Building URIs
A very important aspect of REST is hyperlinks, URIs, in representations that clients can use to transition the
Web service to new application states (this is otherwise known as "hypermedia as the engine of application
state"). HTML forms present a good example of this in practice.
Building URIs and building them safely is not easy with URI [http://docs.oracle.com/javase/6/docs/api/
java/net/URI.html], which is why JAX-RS has the UriBuilder [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/core/UriBuilder.html] class that makes it simple and easy to build URIs safely.
UriBuilder can be used to build new URIs or build from existing URIs. For resource classes it is more
than likely that URIs will be built from the base URI the web service is deployed at or from the request
URI. The class UriInfo [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/UriInfo.html]
provides such information (in addition to further information, see next section).
The following example shows URI building with UriInfo and UriBuilder from the bookmark
example:
UriInfo is obtained using the @Context annotation, and in this particular example injection onto the
field of the root resource class is performed, previous examples showed the use of @Context on resource
method parameters.
UriInfo can be used to obtain URIs and associated UriBuilder instances for the following URIs: the
base URI the application is deployed at; the request URI; and the absolute path URI, which is the request
URI minus any query components.
172
URIs and Links
UriBuilder can be used to build/replace query or matrix parameters. URI templates can also
be declared, for example the following will build the URI "http://localhost/segment?
name=value":
• UriInfo.resolve(java.net.URI) [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
UriInfo.html#resolve(java.net.URI)]
• UriInfo.relativize(java.net.URI) [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
UriInfo.html#relativize(java.net.URI)]
• UriBuilder.resolveTemplate(...) [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
UriBuilder.html#resolveTemplate(java.lang.String, java.lang.Object)] (various arguments)
UriBuilder also introduces a set of methods that provide ways of resolving URI templates by replacing
individual templates with a provided value(s). A short example:
12.3. Link
JAX-RS 2.0 introduces Link [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
Link.html] class, which serves as a representation of Web Link defined in RFC 5988 [http://tools.ietf.org/
173
URIs and Links
html/rfc5988]. The JAX-RS Link class adds API support for providing additional metadata in HTTP
messages, for example, if you are consuming a REST interface of a public library, you might have a
resource returning description of a single book. Then you can include links to related resources, such as a
book category, author, etc. to make the produced response concise but complete at the same time. Clients
are then able to query all the additional information they are interested in and are not forced to consume
details they are not interested in. At the same time, this approach relieves the server resources as only the
information that is truly requested is being served to the clients.
A Link can be serialized to an HTTP message (tyically a response) as additional HTTP header (there
might be multiple Link headers provided, thus multiple links can be served in a single message). Such
HTTP header may look like:
Producing and consuming Links with JAX-RS API is demonstrated in the following example:
...
// client-side processing:
final Response response = target.request().get();
URI u = response.getLink("parent").getUri();
URI u = response.getLink("framework").getUri();
Instances of Link can be also created directly by invoking one of the factory methods on the Link [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Link.html] API that returns a Link.Builder
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Link.Builder.html] that can be used to
configure and produce new links.
174
Chapter 13. Declarative Hyperlinking
RESTful APIs must be hypertext-driven [http://roy.gbiv.com/untangled/2008/rest-apis-must-be-
hypertext-driven]. JAX-RS currently offers UriBuilder [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/core/UriBuilder.html] to simplify URI creation but Jersey adds an additional annotation-based
alternative that is described here.
Important
This API is currently under development and experimental so it is subject to change at any time.
13.1. Dependency
To use Declarative Linking you need to add jersey-declarative-linking module to your
pom.xml file:
<dependency>
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-declarative-linking</artifactId>
<version>2.25.1</version>
</dependency>
Additionaly you will need to add the following dependencies, if you are not deploying into a container
that is already including them:
<dependency>
<groupId>javax.el</groupId>
<artifactId>javax.el-api</artifactId>
<version>2.2.4</version>
</dependency>
<dependency>
<groupId>org.glassfish.web</groupId>
<artifactId>javax.el</artifactId>
<version>2.2.4</version>
</dependency>
If you're not using Maven make sure to have all needed dependencies (see jersey-
declarative-linking [https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-declarative-linking/
dependencies.html]) on the classpath.
@Path("widgets")
public class WidgetsResource {
@GET
public Widgets get() {
return new Widgets();
}
}
175
Declarative Hyperlinking
After a call toWidgetsResource#get, the Jersey runtime will inject the value "/context/
widgets" 1 into the returned Widgets instance. If an absolute URI is desired instead of an absolute path
then the annotation can be changed to @InjectLink(resource=WidgetsResource.class,
style=ABSOLUTE).
The above usage works nicely when there's already a URI template on a class that you want to reuse. If
there's no such template available then you can use a literal value instead of a reference. E.g. the following
is equivalent to the earlier example: @InjectLink(value="widgets", style=ABSOLUTE).
• URI template parameters, e.g. widgets/{id} where {id} represents a variable part of the URI.
instance Represents the instance of the class that contains the annotated field.
resource Represents the resource class instance that returned the entity.
By default URI template parameter values are extracted from the implicit instance bean, i.e. the
following two annotations are equivalent:
@InjectLink("widgets/{id}")
@InjectLink("widgets/${instance.id}")
The source for URI template parameter values can be changed using the @Binding annotation, E.g. the
following three annotations are equivalent:
@InjectLink(value="widgets/{id}", bindings={
@Binding(name="id" value="${resource.id}"}
)
@InjectLink(value="widgets/{value}", bindings={
@Binding("${resource.id}")})
@InjectLink("widgets/${resource.id}")
176
Declarative Hyperlinking
@InjectLink(value="widgets/${instance.id}/offers",
condition="${instance.offers}")
URI offers;
In the above, a URI will only be injected into the offers field if the offers property of the instance
is true.
@InjectLinks(
@InjectLink(value="widgets/${resource.nextId}", rel="next")
)
The above would insert a HTTP Link header into any response whose entity was thus annotated. The
@InjectLink annotation contains properties that map to the parameters of the HTTP Link header. The
above specifies the link relation as next. All properties of the @InjectLink annotation may be used
as described above.
Multiple link headers can be added by use of the @InjectLinks annotation which can contain multiple
@InjectLink annotations.
@InjectLinkNoFollow
Context context;
177
Declarative Hyperlinking
178
Chapter 14. Programmatic API for
Building Resources
14.1. Introduction
A standard approach of developing JAX-RS application is to implement resource classes annotated with
@Path [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Path.html] with resource methods
annotated with HTTP method annotations like @GET [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/GET.html] or @POST [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
POST.html] and implement needed functionality. This approach is described in the chapter JAX-
RS Application, Resources and Sub-Resources [jaxrs-resources.html]. Besides this standard JAX-RS
approach, Jersey offers an API for constructing resources programmatically.
Imagine a situation where a deployed JAX-RS application consists of many resource classes. These
resources implement standard HTTP methods like @GET [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/GET.html], @POST [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
POST.html], @DELETE [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/DELETE.html].
In some situations it would be useful to add an @OPTIONS [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/OPTIONS.html] method which would return some kind of meta data about the
deployed resource. Ideally, you would want to expose the functionality as an additional feature and you
want to decide at the deploy time whether you want to add your custom OPTIONS method. However,
when custom OPTIONS method are not enabled you would like to be OPTIONS requests handled in the
standard way by JAX-RS runtime. To achieve this you would need to modify the code to add or remove
custom OPTIONS methods before deployment. Another way would be to use programmatic API to build
resource according to your needs.
Another use case of programmatic resource builder API is when you build any generic RESTful interface
which depends on lot of configuration parameters or for example database structure. Your resource classes
would need to have different methods, different structure for every new application deploy. You could
use more solutions including approaches where your resource classes would be built using Java byte
code manipulation. However, this is exactly the case when you can solve the problem cleanly with the
programmatic resource builder API. Let's have a closer look at how the API can be utilized.
The following example shows standard JAX-RS "Hello world!" resource class.
179
Programmatic API for
Building Resources
This is just a simple resource class with one GET method returning "Hello World!" string that will be
serialized as text/plain media type.
First, focus on the content of the MyResourceConfig constructor in the example. The Jersey
programmatic resource model is constructed from Resources that contain ResourceMethods. In the
example, a single resource would be constructed from a Resource containing one GET resource method
that returns "Hello World!". The main entry point for building programmatic resources in Jersey is the
Resource.Builder class. Resource.Builder contains just a few methods like the path method
used in the example, which sets the name of the path. Another useful method is a addMethod(String
path) which adds a new method to the resource builder and returns a resource method builder for the
180
Programmatic API for
Building Resources
new method. Resource method builder contains methods which set consumed and produced media type,
define name bindings, timeout for asynchronous executions, etc. It is always necessary to define a resource
method handler (i.e. the code of the resource method that will return "Hello World!"). There are more
options how a resource method can be handled. In the example the implementation of Inflector is used.
The Jersey Inflector interface defines a simple contract for transformation of a request into a response.
An inflector can either return a Response [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
core/Response.html] or directly an entity object, the way it is shown in the example. Another option is to
setup a Java method handler using handledBy(Class<?> handlerClass, Method method)
and pass it the chosen java.lang.reflect.Method instance together with the enclosing class.
A resource method model construction can be explicitly completed by invoking build() on the resource
method builder. It is however not necessary to do so as the new resource method model will be built
automatically once the parent resource is built. Once a resource model is built, it is registered into the
resource config at the last line of the MyResourceConfig constructor in the example.
The following example shows a fragment of web.xml that can be used to deploy the ResourceConfig
JAX-RS application.
If you use another deployment options and you have accessible instance of ResourceConfig which you
use for configuration, you can register programmatic resources directly by registerResources()
181
Programmatic API for
Building Resources
method called on the ResourceConfig. Please note that the method registerResources() replaces all the
previously registered resources.
Because Jersey programmatic API is not a standard JAX-RS feature the ResourceConfig must be used
to register programmatic resources as shown above. See deployment chapter for more information.
In the example above the Resource is built from a HelloWorldResource resource class. The
resource model built this way contains a GET method producing 'text/plain' responses with "Hello
World!" entity. This is quite important as it allows you to whatever Resource objects based on introspecting
existing JAX-RS resources and use builder API to enhance such these standard resources. In the example
we used already implemented HelloWorldResource resource class and enhanced it by OPTIONS
method. The OPTIONS method is handled by an Inflector which returns Response [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Response.html].
The following sample shows how to define sub-resource methods (methods that contains sub-path).
Sub-resource methods are defined using so called child resource models. Child resource models (or child
resources) are programmatic resources build in the same way as any other programmatic resource but
they are registered as a child resource of a parent resource. The child resource in the example is build
directly from the parent builder using method addChildResource(String path). However, there
is also an option to build a child resource model separately as a standard resource and then add it as a
child resource to a selected parent resource. This means that child resource objects can be reused to define
child resources in different parent resources (you just build a single child resource and then register it in
multiple parent resources). Each child resource groups methods with the same sub-resource path. Note that
a child resource cannot have any child resources as there is nothing like sub-sub-resource method concept
in JAX-RS. For example if a sub resource method contains more path segments in its path (e.g. "/root/sub/
resource/method" where "root" is a path of the resource and "sub/resource/method" is the sub resource
182
Programmatic API for
Building Resources
method path) then parent resource will have path "root" and child resource will have path "sub/resource/
method" (so, there will not be any separate nested sub-resources for "sub", "resource" and "method").
See the javadocs of the resource builder API for more information.
To do that, you first need to register a model processor provider in your application, which implements
org.glassfish.jersey.server.model.ModelProcessor extension contract. An example
of a model processor implementation is shown here:
183
Programmatic API for
Building Resources
The MyOptionsModelProcessor from the example is a relatively simple model processor which
iterates over all registered resources and for all of them builds a new resource that is equal to the old
resource except it is enhanced with a new OPTIONS method.
Note that you only need to register such a ModelProcessor as your custom extension provider in the same
way as you would register any standard JAX-RS extension provider. During an application deployment,
Jersey will look for any registered model processor and execute them. As you can seem, model processors
are very powerful as they can do whatever manipulation with the resource model they like. A model
processor can even, for example, completely ignore the old resource model and return a new custom
resource model with a single "Hello world!" resource, which would result in only the "Hello world!"
resource being deployed in your application. Of course, it would not not make much sense to implement
such model processor, but the scenario demonstrates how powerful the model processor concept is. A
better, real-life use case scenario would, for example, be to always add some custom new resource to each
application that might return additional metadata about the deployed application. Or, you might want to
filter out particular resources or resource methods, which is another situation where a model processor
could be used successfully.
It is important to remember that any model processor must always return valid resource model. As you
might have already noticed, in the example above this important rule is not followed. If any of the resources
in the original resource model would already have an OPTIONS method handler defined, adding another
handler would cause the application fail during the deployment in the resource model validation phase.
In order to retain the consistency of the final model, a model processor implementation would have to be
more robust than what is shown in the example.
184
Chapter 15. Server-Sent Events (SSE)
Support
15.1. What are Server-Sent Events
In a standard HTTP request-response scenario a client opens a connection, sends a HTTP request to the
server (for example a HTTP GET request), then receives a HTTP response back and the server closes the
connection once the response is fully sent/received. The initiative always comes from a client when the
client requests all the data. In contrast, Server-Sent Events (SSE) is a mechanism that allows server to
asynchronously push the data from the server to the client once the client-server connection is established
by the client. Once the connection is established by the client, it is the server who provides the data and
decides to send it to the client whenever new "chunk" of data is available. When a new data event occurs
on the server, the data event is sent by the server to the client. Thus the name Server-Sent Events. Note that
at high level there are more technologies working on this principle, a short overview of the technologies
supporting server-to-client communication is in this list:
Polling With polling a client repeatedly sends new requests to a server. If the
server has no new data, then it send appropriate indication and closes the
connection. The client then waits a bit and sends another request after some
time (after one second, for example).
Long-polling With long-polling a client sends a request to a server. If the server has no
new data, it just holds the connection open and waits until data is available.
Once the server has data (message) for the client, it uses the connection and
sends it back to the client. Then the connection is closed.
Server-Sent events SSE is similar to the long-polling mechanism, except it does not send only
one message per connection. The client sends a request and server holds a
connection until a new message is ready, then it sends the message back
to the client while still keeping the connection open so that it can be used
for another message once it becomes available. Once a new message is
ready, it is sent back to the client on the same initial connection. Client
processes the messages sent back from the server individually without
closing the connection after processing each message. So, SSE typically
reuses one connection for more messages (called events). SSE also defines
a dedicated media type that describes a simple format of individual events
sent from the server to the client. SSE also offers standard javascript
client API implemented most modern browsers. For more information
about SSE, see the SSE API specification [http://www.w3.org/TR/2009/
WD-eventsource-20091029/].
185
Server-Sent Events (SSE) Support
A good example of the use case where SSE can be used is a simple message exchange RESTful service.
Clients POST new messages to the service and subscribe to receive messages from other clients. Let's
call the resource messages. While POSTing a new message to this resource involves a typical HTTP
request-response communication between a client and the messages resource, subscribing to receive all
new message notifications would be hard and impractical to model with a sequence of standard request-
response message exchanges. Using Server-sent events provides a much more practical approach here.
You can use SSE to let clients subscribe to the messages resource via standard GET request (use a
SSE client API, for example javascript API or Jersey Client SSE API) and let the server broadcast new
messages to all connected clients in the form of individual events (in our case using Jersey Server SSE
API). Note that with Jersey a SSE support is implemented as an usual JAX-RS resource method. There's
no need to do anything special to provide a SSE support in your Jersey/JAX-RS applications, your SSE-
enabled resources are a standard part of your RESTful Web application that defines the REST API of your
application. The following chapters describes SSE support in Jersey in more details.
Important
Note, that while SSE in Jersey is supported with standard JAX-RS resources, Jersey SSE APIs are
not part of the JAX-RS specification. SSE support and related APIs are a Jersey specific feature
that extends JAX-RS.
Jersey contains support for SSE for both - server and client. SSE in Jersey is implemented as an extension
supporting a new media type, which means that SSE really treated as just another media type that can be
returned from a resource method and processed by the client. There is only a minimal additional support
for "chunked" messages added to Jersey which could not be implemented as standard JAX-RS media type
extension.
Before you start working with Jersey SSE, in order to add support for SSE you need to include the
dependency to the SSE media type module:
Note
Prior to Jersey 2.8, you had to manually register SseFeature [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/media/sse/SseFeature.html] in your application. (The
186
Server-Sent Events (SSE) Support
SseFeature is a feature that can be registered for both, the client and the server.)
Since Jersey 2.8, the feature gets automatically discovered and registered when Jersey SSE
module is put on the application's classpath. The automatic discovery and registration of SSE
feature can be suppressed by setting DISABLE_SSE [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/media/sse/SseFeature.html#DISABLE_SSE] property to true. The
behavior can also be selectively suppressed in either client or server runtime by setting
DISABLE_SSE_CLIENT [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
media/sse/SseFeature.html#DISABLE_SSE_CLIENT] or DISABLE_SSE_SERVER [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/sse/
SseFeature.html#DISABLE_SSE_SERVER] property respectively.
SseFeature adds new supported entity (representation) Java types, namely OutboundEvent
[https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/sse/OutboundEvent.html] for the
outbound server events and InboundEvent [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/media/sse/InboundEvent.html] for inbound client events. These types are serialized by
OutboundEventWriter and de-serialized by InboundEventReader. There is no restriction for
a media type used in individual event messages; however the media type used for a SSE stream as
whole is "text/event-stream" and this media type should be set on messages that are used to serve
SSE events (for example on the server side using @Produces [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/Produces.html] on the method that returns an EventOutput - see below). The
InboundEvent and OutboundEvent contain all the fields needed for composing and processing
individual SSE events. These entities represent the chunks sent or received over an open server-
to-client connection that is represented by an ChunkedOutput [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/server/ChunkedOutput.html] on the servers side and ChunkedInput [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/ChunkedInput.html] on the client side (if
you are not familiar with ChunkedOutput and ChunkedInput, see the Async chapter first for more
details). In other words, our resource method that is used to open a SSE connection to a client does
not return individual OutboundEvents. Instead, a new instance of EventOutput [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/media/sse/EventOutput.html] is returned. EventOutput is a
typed extension of ChunkedOutput<OutboundEvent>. Similarly, to receive InboundEvents
on a client side, Jersey SSE API provides a EventInput that represents a typed extension of
ChunkedInput<InboundEvent>.
187
Server-Sent Events (SSE) Support
The code above defines the resource deployed on URI "/events". This resource has a single @GET
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/GET.html] resource method which returns
as an entity EventOutput [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/sse/
188
Server-Sent Events (SSE) Support
Note
If you are not familiar with ChunkedOutput and ChunkedInput, see the Async chapter
first for more details.
After the eventOutput is returned from the method, the Jersey runtime recognizes that this is a
ChunkedOutput extension and does not close the client connection immediately. Instead, it writes the
HTTP headers to the response stream and waits for more chunks (SSE events) to be sent. At this point the
client can read headers and starts listening for individual events.
Note
Since Jersey runtime does not implicitly close the connection to the client (similarly to
asynchronous processing), closing the connection is a responsibility of the resource method or
the client listening on the open connection for new events (see following example).
In the Example 15.2, “Simple SSE resource method”, the resource method creates a new thread that
sends a sequence of 10 events. There is a 1 second delay between two subsequent events as indicated
in a comment. Each event is represented by OutboundEvent type and is built with a helpf of an
outbound event Builder. The OutboundEvent reflects the standardized format of SSE messages
and contains properties that represent name (for named events), comment, data or id. The code also
sets the event data media type using the mediaType(MediaType) method on the eventBuilder.
The media type, together with the data type set by the data(Class, Object> method (in our
case String.class), is used for serialization of the event data. Note that the event data media type
will not be written to any headers as the response Content-type header is already defined by the
@Produces and set to "text/event-stream" using constant from the SseFeature. The event
media type is used for serialization of event data. Event data media type and Java type are used
to select the proper MessageBodyWriter<T> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/
rs/ext/MessageBodyWriter.html] for event data serialization and are passed to the selected writer that
serializes the event data content. In our case the string "Hello world " + i + "!" is serialized
as "text/plain". In event data you can send any Java entity and associate it with any media type
that you would be able to serialize with an available MessageBodyWriter<T>. Typically, you may
want to send e.g. JSON data, so you would fill the data with a JAXB annotated bean instance and define
media type to JSON.
Note
If the event media type is not set explicitly, the "text/plain" media type is used by default.
Once an outbound event is ready, it can be written to the eventOutput. At that point
the event is serialized by internal OutboundEventWriter which uses an appropriate
MessageBodyWriter<T> to serialize the "Hello world " + i + "!" string. You can send as
many messages as you like. At the end of the thread execution the response is closed which also closes the
connection to the client. After that, no more messages can be sent to the client on this connection. If the
client would like to receive more messages, it would have to send a new request to the server to initiate
a new SSE streaming connection.
A client connecting to our SSE-enabled resource will receive the following data from the entity stream:
event: message-to-client
data: Hello world 0!
event: message-to-client
189
Server-Sent Events (SSE) Support
event: message-to-client
data: Hello world 2!
event: message-to-client
data: Hello world 3!
event: message-to-client
data: Hello world 4!
event: message-to-client
data: Hello world 5!
event: message-to-client
data: Hello world 6!
event: message-to-client
data: Hello world 7!
event: message-to-client
data: Hello world 8!
event: message-to-client
data: Hello world 9!
Note
If you have worked with streams in JAX-RS, you may wonder what is the
difference between ChunkedOutput [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/server/ChunkedOutput.html] and StreamingOutput [https://jersey.java.net/apidocs-
javax.jax-rs/2.0.1/javax/ws/rs/core/StreamingOutput.html].
ChunkedOutput is Jersey-specific API. It lets you send "chunks" of data without closing
the client connection using series of convenient calls to ChunkedOutput.write methods
that take POJO + chunk media type as an input and then use the configured JAX-RS
MessageBodyWriter<T> providers to figure out the proper way of serializing each chunk
POJO to bytes. Additionally, ChunkedOutput writes can be invoked multiple times on the
same outbound response connection, i.e. individual chunks are written in each write, not the full
response entity.
StreamingOutput is, on the other hand, a low level JAX-RS API that works with
bytes directly. You have to implement StreamingOutput interface yourself. Also, its
write(OutputStream) method will be invoked by JAX-RS runtime only once per response
and the call to this method is blocking, i.e. the method is expected to write the entire entity body
before returning.
190
Server-Sent Events (SSE) Support
Let's explore the example together. The BroadcasterResource resource class is annotated
with @Singleton [http://docs.oracle.com/javaee/7/api/javax/inject/Singleton.html] annotation which tells
Jersey runtime that only a single instance of the resource class should be used to serve all the incoming
requests to /broadcast path. This is needed as we want to keep an application-wide single reference to
the private broadcaster field so that we can use the same instance for all requests. Clients that want
to listen to SSE events first send a GET request to the BroadcasterResource, that is handled by the
listenToBroadcast() resource method. The method creates a new EventOutput representing
the connection to the requesting client and registers this eventOutput instance with the singleton
broadcaster, using its add(EventOutput) method. The method then returns the eventOutput
which causes Jersey to bind the eventOutput instance with the requesting client and send the response
HTTP headers to the client. The client connection remains open and the client is now waiting ready to
receive new SSE events. All the events are written to the eventOutput by broadcaster later on.
This way developers can conveniently handle sending new events to all the clients that subscribe to them.
When a client wants to broadcast new message to all the clients listening on their SSE connections,
it sends a POST request to BroadcasterResource resource with the message content. The
method broadcastMessage(String) is invoked on BroadcasterResource resource with
the message content as an input parameter. A new SSE outbound event is built in the standard
191
Server-Sent Events (SSE) Support
way and passed to the broadcaster. The broadcaster internally invokes write(OutboundEvent)
on all registered EventOutputs. After that the method just return a standard text response to the
POSTing client to inform the client that the message was successfully broadcast. As you can see, the
broadcastMessage(String) resource method is just a simple JAX-RS resource method.
In order to implement such a scenario, you may have noticed, that the Jersey SseBroadcaster is not
mandatory to complete the use case. individual EventOutput [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/media/sse/EventOutput.html]s can be just stored in a collection and iterated over in
the broadcastMessage method. However, the SseBroadcaster internally identifies and handles
also client disconnects. When a client closes the connection the broadcaster detects this and removes
the stale connection from the internal collection of the registered EventOutput [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/media/sse/EventOutput.html]s as well as it frees all the server-
side resources associated with the stale connection. Additionally, the SseBroadcaster is implemented
to be thread-safe, so that clients can connect and disconnect in any time and SseBroadcaster will
always broadcast messages to the most recent collection of registered and active set of clients.
In this example, a client connects to the server where the SseResource from the Example 15.2,
“Simple SSE resource method” is deployed. At first, a new JAX-RS/Jersey client instance is created
with a SseFeature registered. Then a WebTarget [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/client/WebTarget.html] instance is retrieved from the client and is used to invoke a
HTTP request. The returned response entity is directly read as a EventInput Java type, which is an
extension of Jersey ChunkedInput that provides generic support for consuming chunked message
192
Server-Sent Events (SSE) Support
payloads. The code in the example then process starts a loop to process the inbound SSE events read
from the eventInput response stream. Each chunk read from the input is a InboundEvent. The
method InboundEvent.readData(Class) provides a way for the client to indicate what Java type
should be used for the event data de-serialization. In our example, individual events are de-serialized as
String Java type instances. This method internally finds and executes a proper MessageBodyReader<T>
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/MessageBodyReader.html] which is the
used to do the actual de-serialization. This is similar to reading an entity from the Response [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Response.html] by readEntity(Class).
The method readData can also throw a ProcessingException [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/ProcessingException.html].
The null check on inboundEvent is necessary to make sure that the chunk was properly read and
connection has not been closed by the server. Once the connection is closed, the loop terminates and the
program completes execution. The client code produces the following console output:
In this example, the client code again connects to the server where the SseResource from the
Example 15.2, “Simple SSE resource method” is deployed. The Client [https://jersey.java.net/apidocs-
193
Server-Sent Events (SSE) Support
The custom event source listener is registered in the event source via
EventSource.register(EventListener, String) method. The next method arguments
define the names of the events to receive and can be omitted. If names are defined, the listener will be
associated with the named events and will only invoked for events with a name from the set of defined
event names. It will not be invoked for events with any other name or for events without a name.
Important
It is a common mistake to think that unnamed events will be processed by listeners that are
registered to process events from a particular name set. That is NOT the case! Unnamed events
are only processed by listeners that are not name-bound. The same limitation applied to HTML5
Javascript SSE Client API supported by modern browsers.
After a connection to the server is opened by calling the open() method on the event source, the
eventSource starts listening to events. When an event named "message-to-client" comes,
the listener will be executed by the event source. If any other event comes (with a name different from
"message-to-client"), the registered listener is not invoked. Once the client is done with processing
and does not want to receive events anymore, it closes the connection by calling the close() method
on the event source.
The listener from the example above will print the following output:
When browsing through the Jersey SSE API documentation, you may have
noticed that the EventSource [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/
sse/EventSource.html] implements EventListener [https://jersey.java.net/apidocs/2.25.1/jersey/org/
glassfish/jersey/media/sse/EventListener.html] and provides an empty implementation for the
194
Server-Sent Events (SSE) Support
The code above is very similar to the code in Example 15.4, “Registering EventListener with
EventSource”. In this example however, the EventSource is constructed directly using a single-
parameter constructor. This way, the connection to the SSE endpoint is by default automatically opened
at the event source creation. The implementation of the EventListener has been moved into the
overridden EventSource.onEvent(...) method. However, this time, the listener method will be
executed for all events - unnamed as well as with any name. Therefore the code checks the name whether
it is an event with the name "message-to-client" that we want to handle. Note that you can still register
additional EventListeners later on. The overridden method on the event source allows you to handle
messages even when no additional listeners are registered yet.
Note
Note, that SSE lost event negotiation facility is a best-effort mechanism which does not provide
any guaranty that all events would be delivered without a loss. You should therefore not rely on
receiving every single event and design your client application code accordingly.
By default, when a connection the the SSE endpoint is lost, the event source will use a default delay before
attempting to reconnect to the SSE endpoint. The SSE endpoint can however control the client-side retry
delay by including a special retry field value in any event sent to the client. Jersey EventSource
implementation automatically tracks any received SSE event retry field values set by the endpoint and
adjusts the reconnect delay accordingly, using the last received retry field value as the new reconnect
delay.
195
Server-Sent Events (SSE) Support
In addition to handling the standard connection losses, Jersey EventSource automatically deals with
any HTTP 503 Service Unavailable responses received from the SSE endpoint, that include a
Retry-After HTTP header with a valid value. The HTTP 503 + Retry-After technique is often
used by HTTP endpoints as a means of connection and traffic throttling. In case a HTTP 503 + Retry-
After response is received in return to a connection request from SSE endpoint, Jersey EventSource
will automatically schedule a reconnect attempt and use the received Retry-After HTTP header value
as a one-time override of the reconnect delay.
196
Chapter 16. Security
16.1. Securing server
16.1.1. SecurityContext
Security information of a request is available by injecting a JAX-RS SecurityContext
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/SecurityContext.html] instance using
@Context [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Context.html] annotation.
The injected security context instance provides the equivalent of the functionality available
on HttpServletRequest [http://docs.oracle.com/javaee/7/api/javax/servlet/http/HttpServletRequest.html]
API. The injected security context depends on the actual Jersey application deployment. For example, for
a Jersey application deployed in a Servlet container, the Jersey SecurityContext will encapsulate
information from a security context retrieved from the Servlet request. In case of a Jersey application
deployed on a Grizzly server, the SecurityContext will return information retrieved from the Grizzly
request.
SecurityContext can be used in conjunction with sub-resource locators to return different resources
based on the specific roles a user principal is included in. For example, a sub-resource locator could return
a different resource if a user is a preferred customer:
1 @Path("basket")
2 public ShoppingBasketResource get(@Context SecurityContext sc) {
3 if (sc.isUserInRole("PreferredCustomer") {
4 return new PreferredCustomerShoppingBasketResource();
5 } else {
6 return new ShoppingBasketResource();
7 }
8 }
SecurityContext is inherently request-scoped, yet can be also injected into fields of singleton
resources and JAX-RS providers. In such case the proxy of the request-scoped SecurityContext will
be injected.
1 @Path("resource")
2 @Singleton
3 public static class MyResource {
4 // Jersey will inject proxy of Security Context
5 @Context
6 SecurityContext securityContext;
7
8 @GET
9 public String getUserPrincipal() {
10 return securityContext.getUserPrincipal().getName();
11 }
12 }
197
Security
1 <security-constraint>
2 <web-resource-collection>
3 <url-pattern>/rest/admin/*</url-pattern>
4 </web-resource-collection>
5 <auth-constraint>
6 <role-name>admin</role-name>
7 </auth-constraint>
8 </security-constraint>
9 <security-constraint>
10 <web-resource-collection>
11 <url-pattern>/rest/orders/*</url-pattern>
12 </web-resource-collection>
13 <auth-constraint>
14 <role-name>customer</role-name>
15 </auth-constraint>
16 </security-constraint>
17 <login-config>
198
Security
18 <auth-method>BASIC</auth-method>
19 <realm-name>my-default-realm</realm-name>
20 </login-config>
The example secures two kinds of URI namespaces using the HTTP Basic Authentication. rest/
admin/* will be accessible only for user group "admin" and rest/orders/* will be accessible for
"customer" user group. This security configuration does not use JAX-RS or Jersey features at all as it
is enforced by the Servlet container even before a request reaches the Jersey application. Keeping these
security constrains up to date with your JAX-RS application might not be easy as whenever you change
the @Path [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Path.html] annotations on your
resource classes you may need to update also the web.xml security configurations to reflect the changed
JAX-RS resource paths. Therefore Jersey offers a more flexible solution based on placing standard Java
EE security annotations directly on JAX-RS resource classes and methods.
Alternatively, typically when deploying your application to a Servlet container, you can
implement your JAX-RS Application [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/
Application.html] subclass by extending from the Jersey ResourceConfig and registering the
RolesAllowedDynamicFeature in the constructor:
Once the feature is registered, you can use annotations from package javax.annotation.security
defined by JSR-250. See the following example.
1 @Path("/")
199
Security
2 @PermitAll
3 public class Resource {
4 @RolesAllowed("user")
5 @GET
6 public String get() { return "GET"; }
7
8 @RolesAllowed("admin")
9 @POST
10 public String post(String content) { return content; }
11
12 @Path("sub")
13 public SubResource getSubResource() {
14 return new SubResource();
15 }
16 }
The resource class Resource defined in the example is annotated with a @PermitAll [http://
docs.oracle.com/javaee/7/api/javax/annotation/security/PermitAll.html] annotation. This means that all
methods in the class which do not override this annotation will be permitted for all user groups (no
restrictions are defined). In our example, the annotation will only apply to the getSubResource()
method as it is the only method that does not override the annotation by defining custom role-
based security settings using the @RolesAllowed [http://docs.oracle.com/javaee/7/api/javax/annotation/
security/RolesAllowed.html] annotation. @RolesAllowed annotations present on the other methods
define a role or a set of roles that are allowed to execute a particular method.
These Java EE security annotations are processed internally in the request filter registered using the Jersey
RolesAllowedDynamicFeature. The roles defined in the annotations are tested against current roles
set in the SecurityContext using the SecurityContext.isUserInRole(String role)
method. In case the caller is not in the role specified by the annotation, the HTTP 403 (Forbidden)
error response is returned.
200
Security
The first party represents a user, in our case Adam, who is called in the OAuth terminology a Resource
Owner. Adam has an account on Twitter. Twitter represents the second party. This party is called a Service
Provider. Twitter offers a web interface that Adam uses to create new tweets, read tweets of others etc.
Now, Adam uses our new web site, HelloWorldWeb, which is a very simple web site that says Hello
World but it additionally displays the last tweet of the logged in user. To do so, our web site needs to
have access to the Twitter account of Adam. Our web site is a 3rd party application that wants to connect
to Twitter and get Adam's tweets. In OAuth, such party is called Consumer. Our Consumer would like to
use Twitter's RESTful APIs to get some data associated with Adam's Twitter account. In order to solve
this situation Adam could directly give his Twitter password to the HelloWorldWeb. This would however
be rather unsafe, especially if we do not know much about the authors of the application. If Adam would
give his password to HelloWorldWeb, he would have to deal with the associated security risks. First of
all, Adam would have to fully trust HelloWorldWeb that it will not misuse the full access to his Twitter
account. Next, if Adam would change his password, he would need to remember to give the new password
also to the HelloWorldWeb application. And at last, if Adam would like to revoke the HelloWorldWeb's
access to his Twitter account, he would need to change his password again. The OAuth protocol has been
devised to address all these challenges.
With OAuth, a resource owner (Adam) grants an access to a consumer (HelloWorldWeb) without giving
it his password. This access grant is achieved by a procedure called authorization flow. Authorization flow
is out of the scope of this documentation and its description can be found in the OAuth specification linked
above. The result of the authorization flow is an Access Token which is later used by the consumer to
authenticate against the service provider. While this brief description applies to both OAuth 1 and 2, note
that there are some differences in details between these two specifications.
Jersey OAuth is currently supported for the following use cases and OAuth versions:
With client and server support there are two supported scenarios:
• Authorization flow
201
Security
16.3.1. OAuth 1
OAuth 1 protocol is based on message signatures that are calculated using specific signature methods.
Signatures are quite complex and therefore are implemented in a separate module. The OAuth 1 Jersey
modules are (groupId:artifactId:description):
16.3.1.1. Server
To add support for OAuth into your server-side application, add the following dependency to your
pom.xml:
<dependency>
<groupId>org.glassfish.jersey.security</groupId>
<artifactId>oauth1-server</artifactId>
<version>2.25.1</version>
</dependency>
Again, there is no need to add a direct dependency to the signature module, it will be transitively included.
Let's now briefly go over the most important server Jersey OAuth APIs and SPIs:
• OAuth1ServerFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/oauth1/
OAuth1ServerFeature.html]: The feature which enables the OAuth 1 support on the server and registers
OAuth1Provider explained in the following point.
• OAuth1Provider [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/oauth1/
OAuth1Provider.html]: Implementation of this SPI must be registered to the server runtime as a
standard provider. The implementation will be used to create request and access token, get consumer by
consumer key, etc. You can either implement your provider or use the default implementation provided
by Jersey by DefaultOAuth1Provider [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
server/oauth1/DefaultOAuth1Provider.html].
• OAuth1ServerProperties [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
oauth1/OAuth1ServerProperties.html]: properties that can be used to configure the OAuth 1 support.
• OAuth1Consumer [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/oauth1/
OAuth1Consumer.html], OAuth1Token [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/server/oauth1/OAuth1Token.html]: classes that contain consumer key, request and access tokens.
You need to implement them only if you also implement the interface OAuth1Provider.
202
Security
Tokens. These endpoints are defined in the OAuth 1 specification and are contacted as part of the OAuth
authorization flow.
Next, when a client initiates the OAuth authorization flow, the provided implementation of
OAuth1Provider will be invoked as to create new tokens, get tokens and finally to store the issued
Access Token. If a consumer already has a valid Access Token and makes Authenticated Requests (with
OAuth 1 Authorization information in the HTTP header), the provider will be invoked to provide the
OAuth1Token for the Access Token information in the header.
16.3.1.2. Client
Note
OAuth client support in Jersey is almost identical for OAuth 1 and OAuth 2. As such, this chapter
provides useful information even for users that use OAuth 2 client support.
To add support for OAuth into your Jersey client application, add the following dependency to your
pom.xml:
<dependency>
<groupId>org.glassfish.jersey.security</groupId>
<artifactId>oauth1-client</artifactId>
<version>2.25.1</version>
</dependency>
As mentioned earlier, there is no need to add a direct dependency to the signature module, it will be
transitively included.
OAuth 1 client support initially started as a code migration from Jersey 1.x. During the migration however
the API of was significantly revised. The high level difference compared to Jersey 1.x OAuth client
API is that the authorization flow is no longer part of a client OAuth filter. Authorization flow is now a
standalone utility and can be used without a support for subsequent authenticated requests. The support
for authenticated requests stays in the ClientRequestFilter but is not part of a public API anymore
and is registered by a Jersey OAuth Feature [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
core/Feature.html].
The most important parts of the Jersey client OAuth API and SPI are explained here:
• OAuth1ClientSupport [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/oauth1/
OAuth1ClientSupport.html]: The main class which contains builder methods to build features that
enable the OAuth 1 support. Start with this class every time you need to add any OAuth 1 support to
the Jersey Client (build an Authorization flow or initialize client to perform authenticated requests).
The class contains a static method that returns an instance of OAuth1Builder [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/client/oauth1/OAuth1Builder.html] and also the class defines
request properties to influence behaviour of the authenticated request support.
• OAuth1AuthorizationFlow [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/
oauth1/OAuth1AuthorizationFlow.html]: API that allows to perform the Authorization flow against
service provider. Implementation of this interface is a class that is used as a standalone utility and is not
part of the JAX-RS client. In other words, this is not a feature that should be registered into the client.
• AccessToken [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/oauth1/
AccessToken.html], ConsumerCredentials [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/oauth1/ConsumerCredentials.html]: Interfaces that define Access Token classes and
Consumer Credentials. Interfaces contain getters for public keys and secret keys of token and credentials.
203
Security
An example of how Jersey OAuth 1 client API is used can be found in the OAuth 1 Twitter Client Example
[https://github.com/jersey/jersey/tree/2.25.1/examples/oauth-client-twitter]. The following code snippets
are extracted from the example and explain how to use the Jersey OAuth client API.
Before we start with any interaction with Twitter, we need to register our application on Twitter.
See the example README.TXT file for the instructions. As a result of the registration, we get the
consumer credentials that identify our application. Consumer credentials consist of consumer key and
consumer secret.
As a first step in our code, we need to perform the authorization flow, where the user grants us an access
to his/her Twitter client.
In the first line, we start the authorization flow. The method internally makes a request to the http://
api.twitter.com/oauth/request_token URL and retrieves a Request Token. Details of this
request can be found in the OAuth 1 specification. It then constructs a URI to which we must redirect
the user. The URI is based on Twitter's authorization URI (http://api.twitter.com/oauth/
authorize) and contains a Request Token as a query parameter. In the Twitter example, we have a
simple console application therefore we print the URL to the console and ask the user to open the URL
in a browser to approve the authorization of our application. Then the user gets a verifier and enters it
back to the console. However, if our application would be a web application, we would need to return a
redirection response to the user in order to redirect the user automatically to the authorizationUri.
For more information about server deployment, check our OAuth 2 Google Client Web Application
Example [https://github.com/jersey/jersey/tree/2.25.1/examples/oauth2-client-google-webapp], where the
client is part of the web application (the client API for OAuth 2 is similar to OAuth 1).
204
Security
Note that if you already have a valid Access Token (for example stored in the database for each of your
users), then you can skip the authorization flow steps and directly create the OAuth Feature configured
to use your Access Token.
Note that the OAuth feature builder API does not require the access token to be set. The reason
for it is that you might want to build a feature which would register the internal Jersey OAuth
ClientRequestFilter and other related providers but which would not initialize the OAuth
providers with a single fixed AccessToken [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/oauth1/AccessToken.html] instance. In such case you would need to specify a token for every
single request in the request properties. Key names and API documentation of these properties can be found
in OAuth1ClientSupport. Using this approach, you can have a single, OAuth enabled instance of
a JAX-RS Client (or WebTarget [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/
WebTarget.html]) and use it to make authenticated requests on behalf of multiple users. Note that you can
use the aforementioned request properties even if the feature has been initialized with an AccessToken
to override the default access token information for particular requests, even though it is probably not a
common use case.
The following code shows how to set an access token on a single request using the Jersey OAuth properties.
205
Security
4 .property(OAuth1ClientSupport.OAUTH_PROPERTY_ACCESS_TOKEN, storedToken)
5 .get();
The output of the second command can be used as a consumer secret to sign the outgoing request:
new ConsumerCredentials("consumer-key", CONSUMER_PRIVATE_KEY). Public key
obtained from the third command can be then used on the service provider to verify the signed data.
For more advanced cases (i.e. other formats of keys) a custom OAuth1SignatureMethod should be
implemented and used.
16.3.2.1. Client
Note
Note: It is suggested to read the section Section 16.3.1.2, “Client” before this section. Support
for OAuth on the client is very similar for both OAuth 1 and OAuth 2 and general principles are
valid for both OAuth versions as such.
Note
OAuth 2 support is in a Beta [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
Beta.html] state and as such the API is subject to change.
To add support for Jersey OAuth 2 Client API into your application, add the following dependency to
your pom.xml:
<dependency>
<groupId>org.glassfish.jersey.security</groupId>
<artifactId>oauth2-client</artifactId>
<version>2.25.1</version>
206
Security
</dependency>
OAuth 2, in contrast with OAuth 1, is not a strictly defined protocol, rather a framework. OAuth 2
specification defines many extension points and it is up to service providers to implement these details and
document these implementations for the service consumers. Additionally, OAuth 2 defines more than one
authorization flow. The authorization flow similar to the flow from OAuth 1 is called the Authorization
Code Grant Flow. This is the flow currently supported by Jersey (Jersey currently does not support other
flows). Please refer to the OAuth 2.0 specification [http://tools.ietf.org/html/rfc6749] for more details
about authorization flows. Another significant change compared to OAuth 1 is that OAuth 2 is not based
on signatures and secret keys and therefore for most of the communication SSL needs to be used (i.e.
the requests must be made through HTTPS). This means that all OAuth 2 endpoint URIs must use the
https scheme.
Due to the fact that OAuth 2 does not define a strict protocol, it is not possible to provide a single, universal
pre-configured tool interoperable with all providers. Jersey OAuth 2 APIs allows a lot of extensibility
via parameters sent in each requests. Jersey currently provides two pre-configured authorization flow
providers - for Google and Facebook.
The most important entry points of Jersey client OAuth 2 API and SPI are explained below:
• OAuth2ClientSupport [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/oauth2/
OAuth2ClientSupport.html]: The main class which contains builder methods to build features that
enable the OAuth 2 support. Start with this class every time you need to add any OAuth 2 support to the
Jersey Client (build an Authorization flow or initialize client to perform authenticated requests). The
class contains also methods to get authorization flow utilities adjusted for Facebook or Google.
• OAuth2CodeGrantFlow [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/
oauth2/OAuth2CodeGrantFlow.html]: API that allows to perform the authorization flow defined as
Authorization Code Grant Flow in the OAuth 2 specification. Implementation of this interface is a class
that is used as a standalone utility and is not part of the JAX-RS client. In other words, this is not a
feature that should be registered into the client.
• ClientIdentifier [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/oauth2/
ClientIdentifier.html]: Identifier of the client issued by the Service Provider for the client. Similar to
ConsumerCredentials [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/oauth1/
ConsumerCredentials.html] from OAuth 1 client support.
• OAuth2Parameters [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/oauth2/
OAuth2Parameters.html]: Defines parameters that are used in requests during the authorization flow.
These parameters can be used to override some of the parameters used in different authorization phases.
• TokenResult [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/oauth2/
TokenResult.html]: Contains result of the authorization flow. One of the result values is the Access
Token. It can additionally contain the expiration time of the Access Token and Refresh Token that can
be used to get new Access Token.
The principle of performing the authorization flow with Jersey is similar to OAuth 1. Check the OAuth 1
Twitter Client Example [https://github.com/jersey/jersey/tree/2.25.1/examples/oauth-client-twitter] which
utilizes Jersey client support for OAuth 2 to get Google Tasks of the user. The application is a web
application that uses redirection to forward the user to the authorization URI.
The following code is an example of how to build and use OAuth 2 authorization flow.
207
Security
2 OAuth2ClientSupport.authorizationCodeGrantFlowBuilder(clientId,
3 "https://example.com/oauth/authorization",
4 "https://example.com/oauth/token");
5 OAuth2CodeGrantFlow flow = builder
6 .property(OAuth2CodeGrantFlow.Phase.AUTHORIZATION, "readOnly", "true")
7 .scope("contact")
8 .build();
9 String authorizationUri = flow.start();
10
11 // Here we must redirect the user to the authorizationUri
12 // and let the user approve an access for our app.
13
14 ...
15
16 // We must handle redirection back to our web resource
17 // and extract code and state from the request
18 final TokenResult result = flow.finish(code, state);
19 System.out.println("Access Token: " + result.get);
In the code above we create an OAuth2CodeGrantFlow from an authorization URI and an access
token URI. We have additionally set a readOnly parameter to true and assigned the parameter to
the authorization phase. This is the way, how you can extend the standard flow with additional service
provider-specific parameters. In this case, the readOnly=true parameter will be added as a query
parameter to the authorization uri returned from the method flow.start(). If we would specify
ACCESS_TOKEN_REQUEST as a phase, then the parameter would have been added to the request when
flow.finish() is invoked. See javadocs for more information. The parameter readOnly is not part
of the OAuth 2 specification and is used in the example for demonstration of how to configure the flow for
needs of specific service providers (in this case, the readOnly param would be described in the service
provider's documentation).
Between the calls to flow.start() and flow.finish(), a user must be redirected to the
authorization URI. This means that the code will not be executed in a single method and the finish part will
be invoked as a handler of redirect request back to our web from authorization URI. Check the OAuth 2
Google Client Web Application Example [https://github.com/jersey/jersey/tree/2.25.1/examples/oauth2-
client-google-webapp] for more details on this approach.
208
Chapter 17. WADL Support
17.1. WADL introduction
Jersey contains support for Web Application Description Language (WADL) [http://wadl.java.net/].
WADL is a XML description of a deployed RESTful web application. It contains model of the deployed
resources, their structure, supported media types, HTTP methods and so on. In a sense, WADL is a
similar to the WSDL (Web Service Description Language) which describes SOAP web services. WADL
is however specifically designed to describe RESTful Web resources.
Important
Since Jersey 2.5.1 the WADL generated by default is WADL in shorter form without additional
extension resources (OPTIONS methods, WADL resource). In order to get full WADL use the
query parameter detail=true.
Let's start with the simple WADL example. In the example there is a simple CountryResource
deployed and we request a wadl of this resource. The context root path of the application is http://
localhost:9998.
The WADL of a Jersey application that contains the resource above can be requested by a HTTP GET
request to http://localhost:9998/application.wadl. The Jersey will return a response with
a WADL content similar to the one in the following example:
209
WADL Support
11 </response>
12 </method>
13 </resource>
14 </resources>
15 </application>
The returned WADL is a XML that contains element resource with path country/{id}. This
resource has one inner method element with http method as attribute, name of java method and its
produced representation. This description corresponds to defined java resource. Now let's look at more
complex example.
The previous WADL does not actually contain all resources exposed in our API. There are other
resources that are available and are hidden in the previous WADL. The previous WADL shows only
resources that are provided by the user. In the following example, the WADL is generated using
query parameter detail: http://localhost:9998/application.wadl?detail. Note that
usage of http://localhost:9998/application.wadl?detail=true is also valid. This
will produce the WADL with all resource available in the application:
210
WADL Support
35 </request>
36 <response>
37 <representation mediaType="*/*"/>
38 </response>
39 <jersey:extended xmlns:jersey="http://jersey.java.net/">true</j
40 </method>
41 </resource>
42 <resource path="application.wadl">
43 <method name="GET" id="getWadl">
44 <response>
45 <representation mediaType="application/vnd.sun.wadl+xml"/>
46 <representation mediaType="application/xml"/>
47 </response>
48 <jersey:extended xmlns:jersey="http://jersey.java.net/">true</j
49 </method>
50 <method name="OPTIONS" id="apply">
51 <request>
52 <representation mediaType="*/*"/>
53 </request>
54 <response>
55 <representation mediaType="text/plain"/>
56 </response>
57 <jersey:extended xmlns:jersey="http://jersey.java.net/">true</j
58 </method>
59 <method name="OPTIONS" id="apply">
60 <request>
61 <representation mediaType="*/*"/>
62 </request>
63 <response>
64 <representation mediaType="*/*"/>
65 </response>
66 <jersey:extended xmlns:jersey="http://jersey.java.net/">true</j
67 </method>
68 <resource path="{path}">
69 <param xmlns:xs="http://www.w3.org/2001/XMLSchema" type="xs:str
70 <method name="GET" id="geExternalGrammar">
71 <response>
72 <representation mediaType="application/xml"/>
73 </response>
74 <jersey:extended xmlns:jersey="http://jersey.java.net/">tru
75 </method>
76 <method name="OPTIONS" id="apply">
77 <request>
78 <representation mediaType="*/*"/>
79 </request>
80 <response>
81 <representation mediaType="text/plain"/>
82 </response>
83 <jersey:extended xmlns:jersey="http://jersey.java.net/">tru
84 </method>
85 <method name="OPTIONS" id="apply">
86 <request>
87 <representation mediaType="*/*"/>
88 </request>
211
WADL Support
89 <response>
90 <representation mediaType="*/*"/>
91 </response>
92 <jersey:extended xmlns:jersey="http://jersey.java.net/">tru
93 </method>
94 <jersey:extended xmlns:jersey="http://jersey.java.net/">true</j
95 </resource>
96 <jersey:extended xmlns:jersey="http://jersey.java.net/">true</jerse
97 </resource>
98 </resources>
99 </application>
100
In the example above the returned application WADL is shown in full. WADL schema is defined by
the WADL specification, so let's look at it in more details. The root WADL document element is the
application. It contains global information about the deployed JAX-RS application. Under this
element there is a nested element resources which contains zero or more resource elements.
Each resource element describes a single deployed resource. In our example, there are only two
root resources - "country/{id}" and "application.wadl". The "application.wadl"
resource is the resource that was just requested in order to receive the application WADL document. Even
though WADL support is an additional feature in Jersey it is still a resource deployed in the resource
model and therefore it is itself present in the returned WADL document. The first resource element
with the path="country/{id}" is the element that describes our custom deployed resource. This
resource contains a GET method and three OPTIONS methods. The GET method is our getCountry()
method defined in the sample. There is a method name in the id attribute and @Produces [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Produces.html] is described in the response/
representation WADL element. OPTIONS methods are the methods that are automatically added
by Jersey to each resource. There is an OPTIONS method returning "text/plain" media type, that
will return a response with a string entity containing the list of methods deployed on this resource
(this means that instead of WADL you can use this OPTIONS method to get similar information in a
textual representation). Another OPTIONS method returning */* will return a response with no entity
and Allow header that will contain list of methods as a String. The last OPTIONS method producing
"application/vnd.sun.wadl+xml" returns a WADL description of the resource "country/
{id}". As you can see, all OPTIONS methods return information about the resource to which the HTTP
OPTIONS request is made.
Second resource with a path "application.wadl" has, again, similar OPTIONS methods and one GET
method which return this WADL. There is also a sub-resource with a path defined by path param
{path}. This means that you can request a resource on the URI http://localhost:9998/
application.wadl/something. This is used only to return an external grammar if there is any
attached. Such a external grammar can be for example an XSD schema of the response entity which if
the response entity is a JAXB bean. An external grammar support via Jersey extended WADL support is
described in sections below.
All resource that were added in this second example into the WADL contains element extended. This
means that this resource is not a part of a core RESTful API and is rather a helper resource. If you need to
mark any your own resource are extended, annotate is with @ExtendedResource [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/server/model/ExtendedResource.html]. Note that there might
be methods visible in the default simple WADL even the user has not added them. This is for example the
case of MVC added methods which were added by ModelProcessor [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/server/model/ModelProcessor.html] but are still intended to be used by the
client to achieve their primary use case of getting formatted data.
Let's now send an HTTP OPTIONS request to "country/{id}" resource using the the curl
command:
212
WADL Support
The returned WADL document has the standard WADL structure that we saw in the WADL document
returned for the whole Jersey application earlier. The main difference here is that the only resource is
the resource to which the OPTIONS HTTP request was sent. The resource has now path "country/15"
and not "country/{id}" as the path parameter {id} was already specified in the request to this
concrete resource.
213
WADL Support
214
WADL Support
215
WADL Support
216
WADL Support
104 </method>
105 </resource>
106 </resource>
107 </resources>
108 </application>
The resource with path="customer/{id}" is similar to the country resource from the
previous example. There is a path parameter which identifies the customer by id. The resource
contains 2 user-declared methods and again auto-generated OPTIONS methods added by Jersey. THe
resource declares 2 sub-resource locators which are represented in the returned WADL document as
nested resource elements. Note that the sub-resource locator getCustomerAddress() returns
a type CustomerAddressSubResource in the method declaration and also in the WADL there is
a resource element for such a sub resource with full internal description. The second method
getAdditionalInfoSubResource() returns only an Object in the method declaration. While
this is correct from the JAX-RS perspective as the real returned type can be computed from a request
information, it creates a problem for WADL generator because WADL is generated based on the static
configuration of the JAX-RS application resources. The WADL generator does not know what type would
be actually returned to a request at run time. That is the reason why the nested resource element
with path="additional-info" does not contain any information about the supported resource
representations.
17.2. Configuration
WADL generation is enabled in Jersey by default. This means that OPTIONS methods are added by default
to each resource and an auto-generated /application.wadl resource is deployed too. To override
this default behavior and disable WADL generation in Jersey, setup the configuration property in your
application:
jersey.config.server.wadl.disableWadl=true
This property can be setup in a web.xml if the Jersey application is deployed in the servlet with web.xml
or the property can be returned from the Application [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/core/Application.html]. getProperties(). See Deployment chapter for more information
on setting the application configuration properties in various deployments.
217
WADL Support
model processor. See Resource builder chapter for more information on ModelProcessor extension
mechanism.
Jersey supports extension of WADL generation called extended WADL. Using the extended WADL
support you can enhance the generated WADL document with additional information, such as resource
method javadoc-based documentation of your REST APIs, adding general documentation, adding external
grammar support, or adding any custom WADL extension information.
The documentation of the existing extended WADL can be found here: Extended WADL in Jersey
1 [https://wikis.oracle.com/display/Jersey/WADL]. This contains description of an extended WADL
generation in Jersey 1.x that is currently supported also by Jersey 2.x.
Again, note that the extended WADL in Jersey 2.x is NOT the intended final version and
API is going to be changed. The existing set of features and functionality will be preserved but
the APIs will be significantly re-designed to support additional use cases. This impacts mainly
the APIs of WadlGenerator [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/wadl/
WadlGenerator.html], WadlGeneratorConfig [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/server/wadl/config/WadlGeneratorConfig.html] as well as any related classes. The API changes
may impact your code if you are using a custom WadlGenerator or plan to implement one.
218
Chapter 18. Bean Validation Support
Validation is a process of verifying that some data obeys one or more pre-defined constraints. This
chapter describes support for Bean Validation [http://beanvalidation.org/] in Jersey in terms of the needed
dependencies, configuration, registration and usage. For more detailed description on how JAX-RS
provides native support for validating resource classes based on the Bean Validation refer to the chapter
in the JAX-RS spec [http://jcp.org/en/jsr/detail?id=339].
<dependency>
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-bean-validation</artifactId>
<version>2.25.1</version>
</dependency>
Note
If you're not using Maven make sure to have also all the transitive dependencies (see jersey-
bean-validation [https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-bean-validation/
dependencies.html]) on the classpath.
This module depends directly on Hibernate Validator [http://www.hibernate.org/subprojects/
validator.html] which provides a most commonly used implementation of the Bean Validation API spec.
If you want to use a different implementation of the Bean Validation API, use standard Maven mechanisms
to exclude Hibernate Validator from the modules dependencies and add a dependency of your own.
<dependency>
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-bean-validation</artifactId>
<version>2.25.1</version>
<exclusions>
<exclusion>
<groupId>org.hibernate</groupId>
<artifactId>hibernate-validator</artifactId>
</exclusion>
</exclusions>
</dependency>
219
Bean Validation Support
• CommonProperties.FEATURE_AUTO_DISCOVERY_DISABLE [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/
CommonProperties.html#FEATURE_AUTO_DISCOVERY_DISABLE]
• ServerProperties.FEATURE_AUTO_DISCOVERY_DISABLE [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/server/
ServerProperties.html#FEATURE_AUTO_DISCOVERY_DISABLE]
• ServerProperties.BV_FEATURE_DISABLE [https://jersey.java.net/apidocs/2.25.1/jersey/org/
glassfish/jersey/server/ServerProperties.html#BV_FEATURE_DISABLE]
Note
Jersey does not support Bean Validation on the client at the moment.
To configure Jersey specific behaviour you can use the following properties:
ServerProperties.BV_DISABLE_VALIDATE_ON_EXECUTABLE_OVERRIDE_CHECK
Disables @ValidateOnExecution check. More on this is
[https://jersey.java.net/ described in Section 18.5, “@ValidateOnExecution”.
apidocs/2.25.1/jersey/org/
glassfish/jersey/server/
ServerProperties.html#BV_DISABLE_VALIDATE_ON_EXECUTABLE_OVERRIDE_CHECK]
ServerProperties.BV_SEND_ERROR_IN_RESPONSE
Enables sending validation errors in response entity to the client.
[https://jersey.java.net/ More on this in Section 18.7.1, “ValidationError”.
apidocs/2.25.1/jersey/org/
glassfish/jersey/server/
ServerProperties.html#BV_SEND_ERROR_IN_RESPONSE]
Customization of the Validator used in validation of resource classes/methods can be done using
ValidationConfig class and exposing it via ContextResolver<T> [https://jersey.java.net/apidocs-
javax.jax-rs/2.0.1/javax/ws/rs/ext/ContextResolver.html] mechanism as shown in Example 18.2, “Using
ValidationConfig to configure Validator.”. You can set custom instances for the following
interfaces from the Bean Validation API:
• MessageInterpolator [http://docs.jboss.org/hibernate/beanvalidation/spec/1.1/api/javax/validation/
MessageInterpolator.html] - interpolates a given constraint violation message.
220
Bean Validation Support
• TraversableResolver [http://docs.jboss.org/hibernate/beanvalidation/spec/1.1/api/javax/validation/
TraversableResolver.html] - determines if a property can be accessed by the Bean Validation provider.
• ConstraintValidatorFactory [http://docs.jboss.org/hibernate/beanvalidation/spec/1.1/api/javax/
validation/ConstraintValidatorFactory.html] - instantiates a ConstraintValidator instance based
off its class. Note that by setting a custom ConstraintValidatorFactory you may loose
injection of available resources/providers at the moment. See Section 18.6, “Injecting” how to handle
this.
• ParameterNameProvider [http://docs.jboss.org/hibernate/beanvalidation/spec/1.1/api/javax/validation/
ParameterNameProvider.html] - provides names for method and constructor parameters.
@Context
private ResourceContext resourceContext;
@Override
public ValidationConfig getContext(final Class<?> type) {
final ValidationConfig config = new ValidationConfig();
config.setConstraintValidatorFactory(resourceContext.getResource(InjectingC
config.setParameterNameProvider(new CustomParameterNameProvider());
return config;
}
/**
* See ContactCardTest#testAddInvalidContact.
*/
private class CustomParameterNameProvider implements ParameterNameProvider {
public CustomParameterNameProvider() {
nameProvider = Validation.byDefaultProvider().configure().getDefaultPar
}
@Override
public List<String> getParameterNames(final Constructor<?> constructor) {
return nameProvider.getParameterNames(constructor);
}
@Override
public List<String> getParameterNames(final Method method) {
// See ContactCardTest#testAddInvalidContact.
221
Bean Validation Support
if ("addContact".equals(method.getName())) {
return Arrays.asList("contact");
}
return nameProvider.getParameterNames(method);
}
}
}
Note
This code snippet has been taken from Bean Validation example [https://github.com/jersey/
jersey/tree/2.25.1/examples/bean-validation-webapp].
The Bean Validation specification supports the use of constraint annotations as a way of declaratively
validating beans, method parameters and method returned values. For example, consider resource class
from Example 18.3, “Constraint annotations on input parameters” augmented with constraint annotations.
222
Bean Validation Support
@POST
@Consumes("application/x-www-form-urlencoded")
public void registerUser(
@NotNull @FormParam("firstName") String firstName,
@NotNull @FormParam("lastName") String lastName,
@Email @FormParam("email") String email) {
...
}
}
The annotations @NotNull and @Email impose additional constraints on the form parameters
firstName, lastName and email. The @NotNull constraint is built-in to the Bean Validation API;
the @Email constraint is assumed to be user defined in the example above. These constraint annotations
are not restricted to method parameters, they can be used in any location in which JAX-RS binding
annotations are allowed with the exception of constructors and property setters.
Rather than using method parameters, the MyResourceClass shown above could have been written as
in Example 18.4, “Constraint annotations on fields”.
@NotNull
@FormParam("firstName")
private String firstName;
@NotNull
@FormParam("lastName")
private String lastName;
@FormParam("email")
public void setEmail(String email) {
this.email = email;
}
@Email
public String getEmail() {
return email;
}
...
}
Note that in this version, firstName and lastName are fields initialized via injection and email is a
resource class property. Constraint annotations on properties are specified in their corresponding getters.
Constraint annotations are also allowed on resource classes. In addition to annotating fields and properties,
an annotation can be defined for the entire class. Let us assume that @NonEmptyNames validates that
one of the two name fields in MyResourceClass is provided. Using such an annotation, the example
above can be extended to look like Example 18.5, “Constraint annotations on class”
223
Bean Validation Support
@NotNull
@FormParam("firstName")
private String firstName;
@NotNull
@FormParam("lastName")
private String lastName;
...
}
Constraint annotations on resource classes are useful for defining cross-field and cross-property
constraints.
The @Constraint annotation must include a reference to the validator class that will be used to validate
decorated values. The EmailValidator class must implement ConstraintValidator<Email,
T> where T is the type of values being validated, as described in Example 18.7, “Validator
implementation.”.
224
Bean Validation Support
...
}
Thus, EmailValidator applies to values annotated with @Email that are of type String. Validators
for other Java types can be defined for the same constraint annotation.
@NotNull
private String firstName;
...
}
@Path("/")
class MyResourceClass {
@POST
@Consumes("application/xml")
public void registerUser(@Valid User user) {
...
}
}
In this case, the validator associated with @StandardUser (as well as those for non-class level
constraints like @NotNull) will be called to verify the request entity mapped to user.
Alternatively, a new annotation can be defined and used directly on the resource method parameter
(Example 18.9, “Entity validation 2”).
@POST
@Consumes("application/xml")
public void registerUser(@PremiumUser User user) {
...
225
Bean Validation Support
}
}
In the example above, @PremiumUser rather than @StandardUser will be used to validate the request
entity. These two ways in which validation of entities can be triggered can also be combined by including
@Valid in the list of constraints. The presence of @Valid will trigger validation of all the constraint
annotations decorating a Java bean class.
Response entity bodies returned from resource methods can be validated in a similar manner by annotating
the resource method itself. To exemplify, assuming both @StandardUser and @PremiumUser are
required to be checked before returning a user, the getUser method can be annotated as shown in
Example 18.10, “Response entity validation”.
@GET
@Path("{id}")
@Produces("application/xml")
@Valid @PremiumUser
public User getUser(@PathParam("id") String id) {
User u = findUser(id);
return u;
}
...
}
Note that @PremiumUser is explicitly listed and @StandardUser is triggered by the presence of the
@Valid annotation - see definition of User class earlier in this section.
For Bean Validation annotations Jersey follows the constraint annotation rules defined in the Bean
Validation specification.
18.5. @ValidateOnExecution
According to Bean Validation specification, validation is enabled by default only for the so called
constrained methods. Getter methods as defined by the Java Beans specification are not constrained
methods, so they will not be validated by default. The special annotation @ValidateOnExecution
can be used to selectively enable and disable validation. For example, you can enable validation on method
getEmail shown in Example 18.11, “Validate getter on execution”.
226
Bean Validation Support
class MyResourceClass {
@Email
@ValidateOnExecution
public String getEmail() {
return email;
}
...
}
The default value for the type attribute of @ValidateOnExecution is IMPLICIT which results in
method getEmail being validated.
Note
According to Bean Validation specification @ValidateOnExecution cannot
be overridden once is declared on a method (i.e. in subclass/
sub-interface) and in this situations a ValidationException should
be raised. This default behaviour can be suppressed by setting
ServerProperties.BV_DISABLE_VALIDATE_ON_EXECUTABLE_OVERRIDE_CHECK
[https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
ServerProperties.html#BV_DISABLE_VALIDATE_ON_EXECUTABLE_OVERRIDE_CHECK]
property (Jersey specific) to true.
18.6. Injecting
Jersey allows you to inject registered resources/providers into
your ConstraintValidator [http://docs.jboss.org/hibernate/beanvalidation/spec/1.1/api/javax/validation/
ConstraintValidator.html] implementation and you can inject Configuration [http://docs.jboss.org/
hibernate/beanvalidation/spec/1.1/api/javax/validation/Configuration.html], ValidatorFactory [http://
docs.jboss.org/hibernate/beanvalidation/spec/1.1/api/javax/validation/ValidatorFactory.html] and
Validator [http://docs.jboss.org/hibernate/beanvalidation/spec/1.1/api/javax/validation/Validator.html] as
required by Bean Validation spec.
Note
Injected Configuration [http://docs.jboss.org/hibernate/beanvalidation/spec/1.1/api/javax/
validation/Configuration.html], ValidatorFactory [http://docs.jboss.org/hibernate/
beanvalidation/spec/1.1/api/javax/validation/ValidatorFactory.html] and Validator [http://
docs.jboss.org/hibernate/beanvalidation/spec/1.1/api/javax/validation/Validator.html] do not
inherit configuration provided by ValidationConfig [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/server/validation/ValidationConfig.html] and need to be configured
manually.
Injection of JAX-RS components into ConstraintValidators is supported via a custom
ConstraintValidatorFactory provided by Jersey. An example is shown in Example 18.12,
“Injecting UriInfo into a ConstraintValidator”.
@Context
227
Bean Validation Support
...
}
}
@Context
private ResourceContext resourceContext;
@Override
public <T extends ConstraintValidator<?, ?>> T getInstance(final Class<T> key)
return resourceContext.getResource(key);
}
@Override
public void releaseInstance(final ConstraintValidator<?, ?> instance) {
// NOOP
}
}
Note
This behaviour may likely change in one of the next version of Jersey to remove the need
of manually providing support for injecting resources/providers from Jersey in your own
ConstraintValidatorFactory implementation code.
228
Bean Validation Support
mapped to a HTTP response with status code 500 (Internal Server Error). On the other hand, when a
ConstraintViolationException is throw two different status code would be returned:
Otherwise.
18.7.1. ValidationError
By default, (during mapping ConstraintViolationExceptions) Jersey doesn't return any entities
that would include validation errors to the client. This default behaviour could be changed by
enabling ServerProperties.BV_SEND_ERROR_IN_RESPONSE [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/server/ServerProperties.html#BV_SEND_ERROR_IN_RESPONSE] property
in your application (Example 18.1, “Configuring Jersey specific properties for Bean Validation.”).
When this property is enabled then our custom ExceptionMapper<E extends Throwable> [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/ExceptionMapper.html] (that is handling
ValidationExceptions) would transform ConstraintViolationException(s)
into ValidationError [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/validation/
ValidationError.html](s) and set this object (collection) as the new response entity which Jersey is able
to sent to the client. Four MediaTypes are currently supported when sending ValidationErrors to
the client:
• text/plain
• text/html
• application/xml
• application/json
Note
Note: You need to register one of the JSON (JAXB) providers (e.g. MOXy) to marshall
validation errors to JSON.
@XmlRootElement
public final class ValidationError {
...
}
229
Bean Validation Support
<div class="validation-errors">
<div class="validation-error">
<span class="message">Contact with given ID does not exist.</span>
(
<span class="path">
<strong>path</strong>
= ContactCardResource.getContact.<return value>
</span>
,
<span class="invalid-value">
<strong>invalidValue</strong>
= null
</span>
)
</div>
</div>
230
Bean Validation Support
[ {
"message" : "Contact with given ID does not exist.",
"messageTemplate" : "{contact.does.not.exist}",
"path" : "ContactCardResource.getContact.<return value>"
} ]
18.8. Example
To see a complete working example of using Bean Validation (JSR-349) with Jersey refer to the Bean
Validation Example [https://github.com/jersey/jersey/tree/2.25.1/examples/bean-validation-webapp].
231
Chapter 19. Entity Data Filtering
Support for Entity Filtering in Jersey introduces a convenient facility for reducing the amount of data
exchanged over the wire between client and server without a need to create specialized data view
components. The main idea behind this feature is to give you APIs that will let you to selectively filter out
any non-relevant data from the marshalled object model before sending the data to the other party based
on the context of the particular message exchange. This way, only the necessary or relevant portion of the
data is transferred over the network with each client request or server response, without a need to create
special facade models for transferring these limited subsets of the model data.
Entity filtering feature allows you to define your own entity-filtering rules for your entity classes based
on the current context (e.g. matched resource method) and keep these rules in one place (directly in your
domain model). With Jersey entity filtering facility it is also possible to assign security access rules to
entity classes properties and property accessors.
We will first explain the main concepts and then we will explore the entity filtering feature topics from
a perspective of basic use-cases,
• Section 19.5, “Entity Filtering based on dynamic and configurable query parameters”
Note
Jersey entity filtering feature is supported via Jersey extension modules listed in Section 19.8,
“Modules with support for Entity Data Filtering”.
<dependency>
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-entity-filtering</artifactId>
<version>2.25.1</version>
</dependency>
Note
If you're not using Maven make sure to have also all the transitive dependencies (see jersey-
entity-filtering [https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-entity-filtering/
dependencies.html]) on the classpath.
The entity-filtering extension module provides three Features which you can register into server/client
runtime in prior to use Entity Filtering in an application:
232
Entity Data Filtering
• EntityFilteringFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/message/
filtering/EntityFilteringFeature.html]
Filtering based on entity-filtering annotations (or i.e. external configuration file) created using
@EntityFiltering [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/message/filtering/
EntityFiltering.html] meta-annotation.
• SecurityEntityFilteringFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
message/filtering/SecurityEntityFilteringFeature.html]
• SelectableEntityFilteringFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
message/filtering/SelectableEntityFilteringFeature.html]
If you want to use both entity-filtering annotations and security annotations for entity data filtering
it is enough to register SecurityEntityFilteringFeature as this feature registers also
EntityFilteringFeature.
Entity-filtering currently recognizes one property that can be passed into the Configuration [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Configuration.html] instance (client/server):
• EntityFilteringFeature.ENTITY_FILTERING_SCOPE [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/message/filtering/EntityFilteringFeature.html#ENTITY_FILTERING_SCOPE] -
"jersey.config.entityFiltering.scope"
Defines one or more annotations that should be used as entity-filtering scope when reading/writing an
entity.
Note
Processing of entity-filtering annotations to create an entity-filtering scope is defined by
following: "Request/Resource entity annotations" > "Configuration" >
"Resource method/class annotations" (on server).
233
Entity Data Filtering
5 .register(SecurityEntityFilteringFeature.class)
6 // Further configuration of ResourceConfig.
7 .register( ... );
Suppose there are three domain model classes (or entities) in our model: Project, User and Task
(getters/setter are omitted for brevity).
234
Entity Data Filtering
To retrieve the entities from server to client, we have created also a couple of JAX-RS resources from
whose the ProjectsResource is shown as example.
235
Entity Data Filtering
9 }
10
11 @GET
12 public List<Project> getProjects() {
13 return getDetailedProjects();
14 }
15 }
• domain model classes (supported on both, server and client sides), and
An example of entity-filtering annotation applicable to a class, field or method can be seen in Example 19.9,
“ProjectDetailedView” below.
Since creating annotation instances directly in Java code is not trivial, it is a good practice to provide
an inner annotation Factory class in each custom filtering annotation, through which new instances of
the annotation can be directly created. The annotation factory class can be created by extending the HK2
AnnotationLiteral class and implementing the annotation interface itself. It should also provide a
static factory method that will create and return a new instance of the Factory class when invoked. Such
annotation instances can be then passed to the client and server run-times to define or override entity-
filtering scopes.
By placing an entity-filtering annotation on an entity (class, fields, getters or setters) we define a so-called
entity-filtering scope for the entity. The purpose of entity-filtering scope is to identify parts of the domain
236
Entity Data Filtering
model that should be processed when the model is to be sent over the wire in a particular entity-filtering
scope. We distinguish between:
• global entity-filtering scope (defined by placing filtering annotation on a class itself), and
• local entity-filtering scope (defined by placing filtering annotation on a field, getter or setter)
Unannotated members of a domain model class are automatically added to all existing global entity-
filtering scopes. If there is no explicit global entity-filtering scope defined on a class a default scope is
created for this class to group these members.
Creating entity-filtering scopes using custom entity-filtering annotations in domain model classes is
illustrated in the following examples.
237
Entity Data Filtering
2
3 private Long id;
4
5 private String name;
6
7 private String description;
8
9 @TaskDetailedView
10 private Project project;
11
12 @TaskDetailedView
13 private User user;
14
15 // getters and setters
16 }
As you can see in the examples above, we have defined 3 separate scopes using
@ProjectDetailedView, @UserDetailedView and @TaskDetailedView annotations and
we have applied these scopes selectively to certain fields in the domain model classes.
Once the entity-filtering scopes are applied to the parts of a domain model, the entity filtering facility
(when enabled) will check the active scopes when the model is being sent over the wire, and filter out all
parts from the model for which there is no active scope set in the given context. Therefore, we need a way
how to control the scopes active in any given context in order to process the model data in a certain way
(e.g. expose the detailed view). We need to tell the server/client runtime which entity-filtering scopes we
want to apply. There are 2 ways how to do this for client-side and 3 ways for server-side:
• Out-bound client request or server response programmatically created with entity-filtering annotations
that identify the scopes to be applied (available on both, client and server)
• Entity-filtering annotations identifying the applied scopes attached to a resource method or class (server-
side only)
When the multiple approaches are combined, the priorities of calculating the applied scopes are as follows:
Entity annotations in request or response > Property passed through
Configuration > Annotations applied to a resource method or class.
In a graph of domain model objects, the entity-filtering scopes are applied to the root node as well as
transitively to all the child nodes. Fields and child nodes that do not match at least a single active scope are
filtered out. When the scope matching is performed, annotations applied to the domain model classes and
fields are used to compute the scope for each particular component of the model. If there are no annotations
on the class or it's fields, the default scope is assumed. During the filtering, first, the annotations on root
model class and it's fields are considered. For all composite fields that have not been filtered out, the
annotations on the referenced child class and it's fields are considered next, and so on.
238
Entity Data Filtering
see why every custom entity-filtering annotation should contain a factory for creating instances of the
annotation.
Annotating a resource method / class is typically easier although it is less flexible and may require more
resource methods to be created to cover all the alternative use case scenarios. For example:
To see how entity-filtering scopes can be applied using a Configuration property, see the
Example 19.1, “Registering and configuring entity-filtering feature on server.” example.
When a Project model from the example above is requested in a scope represented by
@ProjectDetailedView entity-filtering annotation, the Project model data sent over the wire
would contain:
239
Entity Data Filtering
1 {
2 "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX
3 "id" : 1,
4 "name" : "Jersey",
5 "tasks" : [ {
6 "description" : "Entity Data Filtering",
7 "id" : 1,
8 "name" : "ENT_FLT"
9 }, {
10 "description" : "OAuth 1 + 2",
11 "id" : 2,
12 "name" : "OAUTH"
13 } ],
14 "users" : [ {
15 "email" : "[email protected]",
16 "id" : 1,
17 "name" : "Jersey Robot"
18 } ]
19 }
For the default entity-filtering scope the filtered model would look like:
Or in JSON format:
1 {
2 "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX
3 "id" : 1,
4 "name" : "Jersey"
5 }
You can use the mentioned method with client injected into a resource as well.
240
Entity Data Filtering
• @PermitAll [http://docs.oracle.com/javaee/7/api/javax/annotation/security/PermitAll.html],
• @RolesAllowed [http://docs.oracle.com/javaee/7/api/javax/annotation/security/RolesAllowed.html],
and
• @DenyAll [http://docs.oracle.com/javaee/7/api/javax/annotation/security/DenyAll.html]
Although the mechanics of the Entity Data Filtering feature used for the security annotation-based filtering
is the same as with the entity-filtering annotations, the processing of security annotations differs in a few
important aspects:
• There is no need to provide entity-filtering (or security) annotations on resource methods in order to
define entity-filtering scopes for @RolesAllowed that is applied to the domain model components,
as all the available roles for the current user are automatically determined using the information from
the provided SecurityContext (server-side only).
Note
Instances of security annotations (to be used for programmatically defined scopes
either on client or server) can be created using one of the methods in the
SecurityAnnotations [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/message/
filtering/SecurityAnnotations.html] factory class that is part of the Jersey Entity Filtering API.
241
Entity Data Filtering
apidocs/2.25.1/jersey/org/glassfish/jersey/message/filtering/SelectableEntityFilteringFeature.html] you
can leverage the Jersey Entity Filtering facility in connection with query parameters exactly the same way
as you would with custom entity-filtering annotations described in previous chapters.
Query parameters are supported in comma delimited "dot notation" style similar to BeanInfo objects
and Spring path expressions. As an example, the following URL: http://jersey.example.com/
addresses/51234?select=region,streetAddress may render only the address's region and
street address properties as in the following example:
Example 19.18.
1 {
2 "region" : "CA",
3 "streetAddress" : "1234 Fake St."
4 }
• EntityProcessor [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/message/filtering/
spi/EntityProcessor.html]
Implementations of this SPI are invoked to process entity class and it's members. Custom
implementations can extend from AbstractEntityProcessor [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/message/filtering/spi/AbstractEntityProcessor.html].
• ScopeResolver [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/message/filtering/spi/
ScopeResolver.html]
Implementations of this SPI are invoked to retrieve entity-filtering scopes from an array of provided
annotations.
242
Entity Data Filtering
• ObjectProvider [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/message/filtering/spi/
ObjectProvider.html]
To be able to obtain an instance of a filtering object model your provider understands and can act on.
The implementations can extend AbstractObjectProvider [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/message/filtering/spi/AbstractObjectProvider.html].
• ObjectGraphTransformer [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/message/
filtering/spi/ObjectGraphTransformer.html]
Example 19.20. Entity Data Filtering support in MOXy JSON binding provider
1 @Singleton
2 public class FilteringMoxyJsonProvider extends ConfigurableMoxyJsonProvider {
3
4 @Inject
5 private Provider<ObjectProvider<ObjectGraph>> provider;
6
7 @Override
8 protected void preWriteTo(final Object object, final Class<?> type, final T
9 final MediaType mediaType, final MultivaluedMap<S
10 final Marshaller marshaller) throws JAXBException
11 super.preWriteTo(object, type, genericType, annotations, mediaType, htt
12
13 // Entity Filtering.
14 if (marshaller.getProperty(MarshallerProperties.OBJECT_GRAPH) == null)
15 final Object objectGraph = provider.get().getFilteringObject(generi
16
243
Entity Data Filtering
17 if (objectGraph != null) {
18 marshaller.setProperty(MarshallerProperties.OBJECT_GRAPH, objec
19 }
20 }
21 }
22
23 @Override
24 protected void preReadFrom(final Class<Object> type, final Type genericType
25 final MediaType mediaType, final MultivaluedMap<
26 final Unmarshaller unmarshaller) throws JAXBExce
27 super.preReadFrom(type, genericType, annotations, mediaType, httpHeader
28
29 // Entity Filtering.
30 if (unmarshaller.getProperty(MarshallerProperties.OBJECT_GRAPH) == null
31 final Object objectGraph = provider.get().getFilteringObject(generi
32
33 if (objectGraph != null) {
34 unmarshaller.setProperty(MarshallerProperties.OBJECT_GRAPH, obj
35 }
36 }
37 }
38 }
• MOXy
• Jackson (2.x)
19.9. Examples
To see a complete working examples of entity-filtering feature refer to the:
• Entity Filtering example (based on dynamic and configurable query parameters) [https://github.com/
jersey/jersey/tree/2.25.1/examples/entity-filtering-selectable]
244
Chapter 20. MVC Templates
Jersey provides an extension to support the Model-View-Controller (MVC) design pattern. In the context
of Jersey components, the Controller from the MVC pattern corresponds to a resource class or method,
the View to a template bound to the resource class or method, and the model to a Java object (or a Java
bean) returned from a resource method (Controller).
Note
Some of the passages/examples from this chapter have been taken from MVCJ [https://
blogs.oracle.com/sandoz/entry/mvcj] blog article written by Paul Sandoz.
20.1. Viewable
In this approach a resource method explicitly returns a reference to a view template and the data model to
be used. For this purpose the Viewable [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
server/mvc/Viewable.html] class has been introduced in Jersey 1 and is also present (under a different
package) in Jersey 2. A simple example of usage can be seen in Example 20.1, “Using Viewable in a
resource class”.
package com.example;
@Path("foo")
public class Foo {
@GET
public Viewable get() {
return new Viewable("index.foo", "FOO");
}
}
In this example, the Foo JAX-RS resource class is the controller and the Viewable instance
encapsulates the provided data model (FOO string) and a named reference to the associated view template
(index.foo).
Tip
All HTTP methods may return Viewable instances. Thus a POST method may return a template
reference to a template that produces a view as a result of processing an HTML Form [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Form.html].
245
MVC Templates
20.2. @Template
20.2.1. Annotating Resource methods
There is no need to use Viewable every time you want to bind a model to a template. To make
the resource method more readable (and to avoid verbose wrapping of a template reference and model
into Viewable) you can simply annotate a resource method with @Template [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/server/mvc/Template.html] annotation. An updated example,
using @Template, from previous section is shown in Example 20.2, “Using @Template on a resource
method” example.
@Path("foo")
public class Foo {
@GET
@Template(name = "index.foo")
public String get() {
return "FOO";
}
}
In this example, the Foo JAX-RS resource class is still the controller as in previous section but the MVC
model is now represented by the return value of annotated resource method.
The processing of such a method is then essentially the same as if the return type of the method was
an instance of the Viewable [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/mvc/
Viewable.html] class. If a method is annotated with @Template and is also returning a Viewable
instance then the values from the Viewable instance take precedence over those defined in the
annotation. Producible media types are for both cases, Viewable and @Template, determined by the
method or class level @Produces annotation.
The example relies on Jersey MVC conventions a lot and requires more explanation as such. First of all,
you may have noticed that there is no resource method defined in this JAX-RS resource. Also, there is no
246
MVC Templates
template reference defined. In this case, since the @Template annotation placed on the resource class
does not contain any information, the default relative template reference index will be used (for more
on this topic see Section 20.3, “Absolute vs. Relative template reference”). As for the missing resource
methods, a default @GET method will be automatically generated by Jersey for the Foo resource (which is
the MVC Controller now). The implementation of the generated resource method performs the equivalent
of the following explicit resource method:
@GET
public Viewable get() {
return new Viewable("index", this);
}
You can see that the resource class serves in this case also as the model. Producible media types are
determined based on the @Produces annotation declared on the resource class, if any.
Note
In case of "resource class"-based implicit MVC view templates, the controller is also the model.
In such case the template reference index is special, it is the template reference associated with
the controller instance itself.
In the following example, the MVC controller represented by a JAX-RS @GET sub-resource method, is
also generated in the resource class annotated with @Template:
@GET
@Path("{implicit-view-path-parameter}")
public Viewable get(@PathParameter("{implicit-view-path-parameter}") String templat
return new Viewable(template, this);
}
This allows Jersey to support also implicit sub-resource templates. For example, a JAX-RS resource at path
foo/bar will try to use relative template reference bar that resolves to an absolute template reference
/com/foo/Foo/bar.
In other words, a HTTP GET request to a /foo/bar would be handled by this auto-generated method in
the Foo resource and would delegate the request to a registered template processor supports processing of
the absolute template reference /com/foo/Foo/bar, where the model is still an instance of the same
JAX-RS resource class Foo.
Consider the Example 20.3, “Using @Template on a resource class” from the previous section, the
template name reference index is a relative value that Jersey will resolve to its absolute template reference
247
MVC Templates
using a fully qualified class name of Foo (more on resolving relative template name to the absolute one can
be found in the JavaDoc of Viewable [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
server/mvc/Viewable.html] class), which, in our case, is:
"/com/foo/Foo/index"
Jersey will then search all the registered template processors (see Section 20.7, “Writing Custom
Templating Engines”) to find a template processor that can resolve the absolute template reference further
to a "processable" template reference. If a template processor is found then the "processable" template is
processed using the supplied data model.
Note
If none or empty template reference is provided (either in Viewable or via @Template) then
the index reference is assumed and all further processing is done for this value.
In this case, since the template reference begins with "/", Jersey will consider the reference to be absolute
already and will not attempt to absolutize it again. The reference will be used "as is" when resolving it to
a "processable" template reference as described earlier.
Absolute template references start with leading '/' (i.e. /com/example/index.foo) character and
are not further resolved (with respect to the resolving resource class) which means that the template is
looked for at the provided path directly.
Note, however, that template processors for custom templating engines may modify (and the supported
ones do) absolute template reference by pre-pending 'base template path' (if defined) and appending
template suffix (i.e. foo) if the suffix is not provided in the reference.
For example assume that we want to use Mustache templates for our views and we have defined
'base template path' as pages. For the absolute template reference /com/example/Foo/index the
template processor will transform the reference into the following path: /pages/com/example/Foo/
index.mustache.
248
MVC Templates
Example 20.5, “Using @ErrorTemplate on a resource method” shows how to use @ErrorTemplate
on a resource method. If all goes well with the method processing, then the /short-link template is
used to as page sent to the user. Otherwise if an exception is raised then the /error-form template is
shown to the user.
249
MVC Templates
<dependency>
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-mvc-bean-validation</artifactId>
<version>2.25.1</version>
</dependency>
and for non-Maven users the list of dependencies is available at jersey-mvc-bean-validation [https://
jersey.java.net/project-info/2.25.1/jersey/project/jersey-mvc-bean-validation/dependencies.html].
Note
Modules that uses capabilities of the base Jersey MVC module register MvcFeature
automatically, so you don't need to register this feature explicitly in your code.
Almost all of the MVC modules are further configurable and either contain a *Properties (e.g.
FreemarkerMvcProperties) class describing all the available properties which could be set in a
JAX-RS Application / ResourceConfig. Alternatively, the properties are listed directly in the
module *Feature class.
250
MVC Templates
20.6.1. Mustache
An integration module for Mustache [https://github.com/spullara/mustache.java]-based templating engine.
Mustache template processor resolves absolute template references to processable template references
represented as Mustache templates as follows:
• MustacheMvcFeature.TEMPLATE_BASE_PATH -
jersey.config.server.mvc.templateBasePath.mustache
• MustacheMvcFeature.CACHE_TEMPLATES -
jersey.config.server.mvc.caching.mustache
251
MVC Templates
• MustacheMvcFeature.TEMPLATE_OBJECT_FACTORY -
jersey.config.server.mvc.factory.mustache
• MustacheMvcFeature.ENCODING -
jersey.config.server.mvc.encoding.mustache
Property used to configure a default encoding that will be used if none is specified in @Produces
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Produces.html] annotation. If property is
not defined the UTF-8 encoding will be used as a default value.
<dependency>
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-mvc-mustache</artifactId>
<version>2.25.1</version>
</dependency>
and for non-Maven users the list of dependencies is available at jersey-mvc-mustache [https://
jersey.java.net/project-info/2.25.1/jersey/project/jersey-mvc-mustache/dependencies.html].
20.6.2. Freemarker
An integration module for Freemarker [http://freemarker.org/]-based templating engine.
Freemarker template processor resolves absolute template references to processable template references
represented as Freemarker templates as follows:
Jersey will assign the model instance to an attribute named model. So it is possible to reference the foo
key from the provided Map (MVC Model) resource from the Freemarker template as follows:
<h1>${model.foo}</h1>
• FreemarkerMvcFeature.TEMPLATE_BASE_PATH -
jersey.config.server.mvc.templateBasePath.freemarker
252
MVC Templates
• FreemarkerMvcFeature.CACHE_TEMPLATES -
jersey.config.server.mvc.caching.freemarker
• FreemarkerMvcFeature.TEMPLATE_OBJECT_FACTORY -
jersey.config.server.mvc.factory.freemarker
• FreemarkerMvcFeature.ENCODING -
jersey.config.server.mvc.encoding.freemarker
Property used to configure a default encoding that will be used if none is specified in @Produces
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/Produces.html] annotation. If property is
not defined the UTF-8 encoding will be used as a default value.
<dependency>
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-mvc-freemarker</artifactId>
<version>2.25.1</version>
</dependency>
and for non-Maven users the list of dependencies is available at jersey-mvc-freemarker [https://
jersey.java.net/project-info/2.25.1/jersey/project/jersey-mvc-freemarker/dependencies.html].
20.6.3. JSP
An integration module for JSP-based templating engine.
JSP template processor resolves absolute template references to processable template references
represented as JSP pages as follows:
Jersey will assign the model instance to the attribute named model or it. So it is possible to reference
the foo property on the Foo resource from the JSP template as follows:
253
MVC Templates
<h1>${model.foo}</h1>
or
<h1>${it.foo}</h1>
To include another JSP page in the currently processed one a custom include tag can be used. Mandatory
parameter page represents a relative template name which would be absolutized using the same resolving
resource class as the parent JSP page template.
<html>
<body>
<rbt:include page="include.jsp"/>
</body>
</html>
• JspMvcFeature.TEMPLATE_BASE_PATH -
jersey.config.server.mvc.templateBasePath.jsp
<dependency>
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-mvc-jsp</artifactId>
<version>2.25.1</version>
</dependency>
and for non-Maven users the list of dependencies is available at jersey-mvc-jsp [https://jersey.java.net/
project-info/2.25.1/jersey/project/jersey-mvc-jsp/dependencies.html].
Tip
When writing template processors it is recommend that you use an appropriate unique suffix for
the processable template references, in which case it is then possible to easily support mixing of
multiple templating engines in a single application without conflicts.
254
MVC Templates
@Override
public String resolve(String path, final MediaType mediaType) {
final String extension = ".testp";
if (!path.endsWith(extension)) {
path = path + extension;
}
@Override
public void writeTo(String templateReference,
Viewable viewable,
MediaType mediaType,
OutputStream out) throws IOException {
final PrintStream ps = new PrintStream(out);
ps.print("path=");
ps.print(templateReference);
ps.println();
ps.print("model=");
ps.print(viewable.getModel().toString());
ps.println();
}
Note
In a typical set-up projects using the Jersey MVC templating support would depend on the base
module that provides the API and SPI and a single templating engine module for the templating
engine of your choice. These modules need to be mentioned explicitly in your pom.xml file.
If you want to use just templating API infrastructure provided by Jersey for the MVC templating support
in order to implement your custom support for a templating engine other than the ones provided by Jersey,
you will need to add the base jersey-mvc [https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-
mvc/dependencies.html] module into the list of your dependencies:
<dependency>
255
MVC Templates
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-mvc</artifactId>
<version>2.25.1</version>
</dependency>
256
Chapter 21. Logging
21.1. Logging traffic
21.1.1. Introduction
Jersey Logging supports the logging request and response via internal client and server filters, which are
configured and registered by LoggingFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/logging/LoggingFeature.html] 's properties. LoggingFeature has been introduced in Jersey
2.23 version and deprecates an older LoggingFilter.
• Logger level
Defines level that will be used to log messages by logging filters. Messages will be logged only if the
effective level of the logger allows it.
• Verbosity
257
Logging
• application/atom+xml
• application/json
• application/svg+xml
• application/x-www-form-urlencoded
• application/xhtml+xml
• application/xml
Maximum number of entity bytes to be logged (and buffered) - if the entity is larger, logging filter will
print (and buffer in memory) only the specified number of bytes and print "...more..." string at the end.
Negative values are interpreted as zero.
258
Logging
259
Chapter 22. Monitoring and
Diagnostics
22.1. Monitoring Jersey Applications
22.1.1. Introduction
Important
Jersey monitoring support has been released as a beta release in Jersey 2.1 version. As such, the
exposed monitoring public APIs and functionality described in this section may change in the
future Jersey releases.
Jersey provides functionality for monitoring JAX-RS/Jersey applications. Application monitoring is useful
in cases when you need to identify the performance hot-spots in your JAX-RS application, observe
execution statistics of particular resources or listen to application or request lifecycle events. Note that this
functionality is Jersey-specific extension to JAX-RS API.
Event Listeners Event listeners allow users to receive and process a predefined
set of events that occur during a application lifecycle (such as
application initialization, application destroy) as well as request
processing lifecycle events (request started, resource method
finished, exception thrown, etc.). This feature is always enabled
in Jersey server runtime and is leveraged by the other monitoring
features.
All monitoring related APIs (beta!) can be found in the jersey-server module in
org.glassfish.jersey.server.monitoring package. Monitoring in Jersey is currently
supported on the server side.
260
Monitoring and Diagnostics
• ApplicationEventListener [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
monitoring/ApplicationEventListener.html] for listening to application events, and
• RequestEventListener [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
monitoring/RequestEventListener.html] for listening to events of request processing.
Let's start with an example. The following examples show simple implementations of Jersey event listeners
as well as a test JAX-RS resource that will be monitored.
261
Monitoring and Diagnostics
Once the listeners and the monitored resource is defined, it's time to initialize our application.
The following piece of code shows a ResourceConfig [https://jersey.java.net/apidocs/2.25.1/jersey/org/
glassfish/jersey/server/ResourceConfig.html] that is used to initialize the application (please note that only
ApplicationEventListener is registered as provider).
1 ResourceConfig resourceConfig =
2 new ResourceConfig(TestResource.class, MyApplicationEventListener.c
3 .setApplicationName("my-monitored-application");
Our example application now contains a simple resource TestResource that defines resource methods
for GET and POST and a custom MyApplicationEventListener event listener.
262
Monitoring and Diagnostics
Let's deploy the application and use a simple test client code to produce some activity in order to spawn
new events:
1 target.path("resource").request()
2 .post(Entity.entity("post", MediaType.TEXT_PLAIN_TYPE));
3 target.path("resource").request().get();
When we start the application, run the test client and then stop the application, the console output for the
deployed server-side application would contain the following output:
263
Monitoring and Diagnostics
• Do not block the thread executing the event listeners by performing long-running tasks. Execution of
event listeners is a part of the standard application and request processing and as such needs to finish as
quickly as possible to avoid negative impact on overall application performance.
• Do not try to modify mutable objects returned from ApplicationEvent and RequestEvent
getters to avoid experiencing undefined behavior. Events listeners should use the information for read
only purposes only. Use different techniques like filters, interceptors or other providers to modify the
processing of requests and applications. Even though modification might be possible and might work
as desired now, your code is in risk of producing intermittent failures or unexpected behaviour (for
example after migrating to new Jersey version).
• If you do not want to listen to request events, do not return an empty listener in the onRequest()
method. Return null instead. Returning empty listener might have a negative performance impact. Do
not rely on JIT optimizing out the empty listener invocation code.
• If you miss any event type or any detail in the events, let us know via Jersey user mailing list.
Calculating the monitoring statistics has obviously a performance impact, therefore this feature is disabled
by default. To enable the feature, set the following configuration property to true:
jersey.config.server.monitoring.statistics.enabled=true
1 @Path("resource")
264
Monitoring and Diagnostics
MonitoringStatistics [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/monitoring/
MonitoringStatistics.html] are injected into the resource using an @Inject [http://docs.oracle.com/
javaee/7/api/javax/inject/Inject.html] annotation. Please note the usage of the Provider [http://
docs.oracle.com/javaee/7/api/javax/inject/Provider.html] for injection (it will be discussed later). Firstly,
the snapshot of statistics is retrieved by the snapshot() method. The snapshot of statistics is an
immutable copy of statistics which does not change over the time. Additionally, data in a snapshot are
consistent. It's recommended to create snapshots before working with the statistics data and then process
the snapshot data. Working with original non-snapshot data makes sense when data consistency is not
important and performance is of highest concern. While it is currently not the case, the injected non-
snapshot data may be implemented as mutable for performance reasons in a future release of Jersey.
The injected monitoring statistics represent the root of the collected statistics hierarchy. The
hierarchy can be traversed to retrieve any partial statistics data. In the example, we retrieve certain
request TimeWindowStatistics [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
monitoring/TimeWindowStatistics.html] data. In our case, those are the request execution statistics for a
time window defined by long value 0 which means unlimited time window. This means we are retrieving
the global request execution statistics measured since a start of the application. Finally, request count and
average duration from the statistics are used to produce the String response. When we invoke few GET
requests on the StatisticsResource, we get the following console output:
265
Monitoring and Diagnostics
ResponseStatistics [https:// response statistics (eg. response status codes and their count)
jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/
jersey/server/monitoring/
ResponseStatistics.html]
All the time window statistics can be retrieved from a Map<Long, TimeWindowStatistics> map
returned from ExecutionStatistics.getTimeWindowStatistics(). Key of the map is the
number of milliseconds of interval (so, for example key 60000 points to statistics for last one minute).
Note, that snapshot() method was called in the example only on the top level
MonitoringStatistics. This produced a snapshot of the entire tree of statistics and therefore we
do not need to call snapshot() on TimeWindowStatistics again.
266
Monitoring and Diagnostics
Statistics are not calculated for each request or each change. Statistics are calculated only from the collected
data in regular intervals for performance reasons (for example once per second). If you want to be notified
about new statistics, register an implementation of MonitoringStatisticsListener [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/server/monitoring/MonitoringStatisticsListener.html] as one of
your custom application providers. Your listener will be called every time the new statistics are calculated
and the updated statistics data will be passed to the listener method. This is another way of receiving
statistics. See the linked listener API documentation for more information.
jersey.config.server.monitoring.statistics.mbeans.enabled=true
Note that enabling exposure of monitoring MXBeans causes that also the calculation of
MonitoringStatistics is automatically enabled as the exposed MXBean statistics are extracted
from MonitoringStatistics.
The easiest way is to browse the MXBeans in the JConsole. Open the JConsole ($JAVA_HOME/bin/
jconsole). Then connect to the process where JAX-RS application is running (server on which the
application is running). Switch to a MBean tab and in the MBean tree on the left side find a group
org.glassfish.jersey. All deployed Jersey applications are located under this group. If you don't
see such this group, then MBeans are not exposed (check the configuration property and logs if they not
contain any exceptions or errors). The following figure is an example of an output from the JConsole:
267
Monitoring and Diagnostics
Under the root org.glassfish.jersey Jersey MBean group you can find your
application. If the server contains more Jersey application, all will be present under
the root Jersey the group. In the screen-shot, the deployed JAX-RS application
is named myApplication (the name can be defined via ResourceConfig [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/ResourceConfig.html] directly or by
setting the ServerProperties.APPLICATION_NAME [https://jersey.java.net/apidocs/2.25.1/jersey/org/
glassfish/jersey/server/ServerProperties.html#APPLICATION_NAME] property). Each application
contains Global, Resource and Uris sub-groups. The Global group contains all global
statistics like overall requests statistics of the entire application (AllRequestTimes), configuration
of the JAX-RS application (Configuration), statistics about ExceptionMapper<E extends
Throwable> [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/ext/ExceptionMapper.html]
execution (ExceptionMapper) and statistics about produced responses (Responses).
Resources and Uris groups contains monitoring statistics specific to individual resources. Statistics
in Resources are bound to the JAX-RS resource Java classes loaded by the application. Uris contains
statistics of resources based on the matched application Uris (one URI entry represents all methods
bound to the particular URI, e.g. /resource/exception). As Jersey provides programmatic resource
builders (described in the chapter "Programmatic API for Building Resources"), one Java resource class
can be an endpoint for resource methods on many different URIs. And also one URI can be served by
method from many different Java classes. Therefore both views are not to be compared 1:1. Instead they
provide different loggical views on your JAX-RS application. This monitoring feature can also help when
designing the JAX-RS APIs as it provides nice view on available root application URIs.
Both logical views on the resources exposed by application share few common principles. A single
resource entry is always a set of resource methods which are available under the methods sub-group.
Statistics can be found in MBeans MethodTimes and RequestTimes. MethodTimes contains
268
Monitoring and Diagnostics
statistics measured on on resource methods (duration of execution of a code of the a resource method),
whereas RequestTimes contains statistics of an entire request execution (not only a time of the
execution of the resource method but the overall time of the execution of whole request by Jersey runtime).
Another useful information is that statistics directly under resource (not under the methods sub-group)
contains summary of statistics for all resource methods grouped in the resource entry.
• Resource groups contain also entries for resources that were added by Jersey at deployment time using
ModelProcessor (for example all OPTIONS methods, WADL). HEAD methods are not present in the
MXBeans view (even HEAD methods are in resources).
• Execution statistics for different time windows have different update intervals. The shorter the time
window, the shorter the update interval. This causes that immediately after the application start, the
shorter time windows (such as 15 seconds) may contain higher values than longer ones (e.g. 1 hour time
window). The reason is that 1 hour interval will show information that is not up to date and therefore has
smaller value. This inconsistency is not so much significant when application is running longer time.
Total unlimited time windows contains always up-to-date data. This inconsistency will get fixed in a
future Jersey release.
MXBeans can be also accessed using JMX. To do so, you would need to use the interfaces of MXBeans.
These interfaces are even useful when working with MXBeans only trough JConsole as they contain
Javadocs for each MXBean and attribute. Monitoring MBeans are defined by following interfaces:
• ApplicationMXBean [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
monitoring/ApplicationMXBean.html]: contains configuration statistics
• ExceptionMapperMXBean [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
monitoring/ExceptionMapperMXBean.html]: contains statistics of exception mappers
• ResourceMethodMXBean [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
monitoring/ResourceMethodMXBean.html]: contains statistics of resource method
• ResourceMXBean [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/monitoring/
ResourceMXBean.html]: contains statistics of resource
• ResponseMXBean [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
monitoring/ResponseMXBean.html]: contains statistics of responses
The list does not contain MXBean for the execution and time window statistics. The reason is that
this bean is defined as a DynamicMBean [http://docs.oracle.com/javase/6/docs/api/javax/management/
DynamicMBean.html]. Attributes of this dynamic MBean contains statistics for all time windows
available.
MXBeans do not reference each other but can be retrieved by their ObjectName [http://docs.oracle.com/
javase/6/docs/api/javax/management/ObjectName.html]s which are designed in the way, that final MBean
269
Monitoring and Diagnostics
tree looks nicely organized in JConsole. Each MXBean is uniquely identified by its ObjectName and
properties of ObjectName are structured hierarchically, so that each MXBean can be identified to which
parent it belong to (e.g. execution statistics dynamic MXBean belongs to resource method MXBean, which
belongs to resource and which belongs to application). Check the ObjectNames of exposed MXBeans
to investigate the structure (for example through JConsole).
To reiterate, exposing Jersey MXBeans and the calculating monitoring statistics may have an performance
impact on your application and therefore should be enabled only when needed. Also, please note, that it
Jersey monitoring is exposing quite a lot of information about the monitored application which might be
viewed as problematic in some cases (e.g. in production server deployments).
The collected tracing information related to a single request is returned to the requesting client in the HTTP
headers of a response for the request. The information is also logged on the server side using a dedicated
Java Logger instance.
• ON_DEMAND - tracing support is in a stand-by mode; it is enabled selectively per request, via a special
X-Jersey-Tracing-Accept HTTP request header.
The level of detail of the information provided by Jersey tracing facility - the tracing
threshold - can be customized. The tracing threshold can be set at the application level via
jersey.config.server.tracing.threshold application configuration property, or at a
request level, via X-Jersey-Tracing-Threshold HTTP request header. The request level
configuration overrides any application level setting. There are 3 supported levels of detail for Jersey
tracing:
• SUMMARY - very basic summary information about the main request processing stages.
• TRACE - detailed information about activities in all the main request processing stages (default threshold
value).
• VERBOSE - most verbose mode that provides extended information similar to TRACE level, however
with details on entity providers (MBR/MBW) that were skipped during the provider selection phase for any
reason (lower priority, pattern matching, etc). Additionally, in this mode all received request headers
are echoed as part of the tracing information.
270
Monitoring and Diagnostics
• X-Jersey-Tracing-Accept - used to enable the tracing support for the particular request. It is
applied only when the application-level tracing support is configured to ON_DEMAND mode. The value
of the header is not used by the Jersey tracing facility and as such it can be any arbitrary (even empty)
string.
• X-Jersey-Tracing-Threshold - used to override the tracing level of detail. Allowed values are:
SUMMARY, TRACE, VERBOSE.
Each tracing message is in the following format: CATEGORY [TIME] TEXT, e.g.
The CATEGORY is used to categorize tracing events according to the following event types:
271
Monitoring and Diagnostics
The TIME, if present, is a composite value that consists of 3 parts [ duration / time_from_start
| total_req_ratio ]:
1. duration - the duration of the current trace event [milliseconds]; e.g. duration of filter processing
2. time_from_start - the end time of the current event with respect to the request processing start
time [milliseconds]
3. total_req_ratio - the duration of the current event with respect to the total request processing
time [percentage]; this value tells you how significant part of the whole request processing time has
been spent in the processing phase described by the current event
There are certain tracing events that do not have any duration. In such case, duration values are not set
(---- literal).
The tracing event TEXT is a free-form detailed text information about the current diagnostic event.
Tip
For better identification, instances of JAX-RS components are represented
by class name, identity hash code and @Priority value if set, e.g.
[org.glassfish.jersey.tests.integration.tracing.ContainerResponseFilter5001
@494a8227 #5001].
272
Monitoring and Diagnostics
3 ...
4 X-Jersey-Tracing-033: WI [ 0.00 / 23.39 ms | 0.02 %] [org.glassfish.j
5 X-Jersey-Tracing-034: WI [ 0.01 / 23.42 ms | 0.02 %] [org.glassfish.j
6 X-Jersey-Tracing-035: MBW [ ---- / 23.45 ms | ---- %] Find MBW for typ
7 X-Jersey-Tracing-036: MBW [ ---- / 23.52 ms | ---- %] [org.glassfish.j
8 X-Jersey-Tracing-037: MVC [ ---- / 24.05 ms | ---- %] Forwarding view
9 X-Jersey-Tracing-038: MBW [ 1.09 / 24.63 ms | 4.39 %] WriteTo by [org.
10 X-Jersey-Tracing-039: WI [ 0.00 / 24.67 ms | 0.01 %] [org.glassfish.j
11 X-Jersey-Tracing-040: WI [ 0.00 / 24.70 ms | 0.01 %] [org.glassfish.j
12 ...
273
Chapter 23. Custom Injection and
Lifecycle Management
Since version 2.0, Jersey uses HK2 [http://hk2.java.net/] library for component life cycle management and
dependency injection. Rather than spending a lot of effort in maintaining Jersey specific API (as it used
to be before Jersey 2.0 version), Jersey defines several extension points where end-user application can
directly manipulate Jersey HK2 bindings using the HK2 public API to customize life cycle management
and dependency injection of application components.
Jersey user guide can by no means supply an exhaustive documentation of HK2 API in it's entire scope.
This chapter only points out the most common scenarios related to dependency injection in Jersey and
suggests possible options to implement these scenarios. It is highly recommended to check out the
HK2 [http://hk2.java.net/] website and read HK2 documentation in order to get better understanding of
suggested approaches. HK2 documentation should also help in resolving use cases that are not discussed
in this writing.
There are typically three main use cases, where your application may consider dealing with HK2 APIs
exposed in Jersey:
• Implementing a custom injection provider that allows an application to define additional types to be
injectable into Jersey-managed JAX-RS components.
• Specifying a custom component life cycle management for your application components.
Relying on Servlet HTTP session concept is not very RESTful. It turns the originally state-less HTTP
communication schema into a state-full manner. However, it could serve as a good example that will
help me demonstrate implementation of the use cases described above. The following examples should
work on top of Jersey Servlet integration module. The approach that will be demonstrated could be
further generalized. Bellow i will show how to make actual Servlet HttpSession [http://docs.oracle.com/
javaee/7/api/javax/servlet/http/HttpSession.html] injectable into JAX-RS components and how to make
this injection work with a custom inject annotation type. Finally, i will demonstrate how you can write
HttpSession-scoped JAX-RS resources.
@Path("di-resource")
public class MyDiResource {
...
274
Custom Injection and
Lifecycle Management
To make the above injection work, you will need to define an additional HK2 binding in
your application ResourceConfig [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
ResourceConfig.html]. Let's start with a custom HK2 Factory [https://hk2.java.net/apidocs/org/glassfish/
hk2/api/Factory.html] implementation that knows how to extract HttpSession out of given
HttpServletRequest.
import org.glassfish.hk2.api.Factory;
...
@Inject
public HttpSessionFactory(HttpServletRequest request) {
this.request = request;
}
@Override
public HttpSession provide() {
return request.getSession();
}
@Override
public void dispose(HttpSession t) {
}
}
Please note that the factory implementation itself relies on having the actual HttpServletRequest
instance injected. In your implementation, you can of course depend on other types (and inject them
conveniently) as long as these other types are bound to the actual HK2 service locator by Jersey or by your
application. The key notion to remember here is that your HK2 Factory implementation is responsible
for implementing the provide() method that is used by HK2 runtime to retrieve the injected instance.
Those of you who worked with Guice binding API in the past will most likely find this concept very
familiar.
Once implemented, the factory can be used in a custom HK2 Binder to define the new injection binding
for HttpSession. Finally, the implemented binder can be registered in your ResourceConfig [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/ResourceConfig.html]:
import org.glassfish.hk2.utilities.binding.AbstractBinder;
...
public MyApplication() {
...
register(new AbstractBinder() {
@Override
protected void configure() {
bindFactory(HttpSessionFactory.class).to(HttpSession.class)
.proxy(true).proxyForSameScope(false).in(RequestScoped.class);
}
275
Custom Injection and
Lifecycle Management
});
}
}
Note that we did not define any explicit injection scope for the new injection binding. By default,
HK2 factories are bound in a HK2 PerLookup [https://hk2.java.net/apidocs/org/glassfish/hk2/api/
PerLookup.html] scope, which is in most cases a good choice and it is suitable also in our example.
To summarize the approach described above, here is a list of steps to follow when implementing custom
injection provider in your Jersey application :
• Use the HK2 Factory to define an injection binding for the injected instance via custom HK2
Binder.
While the Factory-based approach is quite straight-forward and should help you to quickly prototype
or even implement final solutions, you should bear in mind, that your implementation does not need to
be based on factories. You can for instance bind your own types directly, while still taking advantage of
HK2 provided dependency injection. Also, in your implementation you may want to pay more attention to
defining or managing injection binding scopes for the sake of performance or correctness of your custom
injection extension.
Important
While the individual injection binding implementations vary and depend on your use case,
to enable your custom injection extension in Jersey, you must register your custom HK2
Binder [https://hk2.java.net/apidocs/org/glassfish/hk2/utilities/Binder.html] implementation in
your application ResourceConfig [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/server/ResourceConfig.html]!
In the following example, we will describe how a custom injection annotation can be supported. Let's
start with defining a new custom SessionInject injection annotation that we will specifically use to
inject instances of HttpSession [http://docs.oracle.com/javaee/7/api/javax/servlet/http/HttpSession.html]
(similarly to the previous example):
@Retention(RetentionPolicy.RUNTIME)
@Target(ElementType.FIELD)
public @interface SessionInject { }
@Path("di-resource")
public class MyDiResource {
276
Custom Injection and
Lifecycle Management
...
}
Again, the semantics remains the same as in the example described in the previous section. You want
to have the actual HTTP Servlet session instance injected into your MyDiResource instance. This
time however, you expect that the httpSession field to be injected must be annotated with a custom
@SessionInject annotation. Obviously, in this simplistic case the use of a custom injection annotation
is an overkill, however, the simplicity of the use case will help us to avoid use case specific distractions
and allow us better focus on the important aspects of the job of defining a custom injection annotation.
If you remember from the previous section, to make the injection in the code snippet above work, you
first need to implement the injection provider (HK2 Factory [https://hk2.java.net/apidocs/org/glassfish/
hk2/api/Factory.html]) as well as define the injection binding for the HttpSession type. That part we
have already done in the previous section. We will now focus on what needs to be done to inform the HK2
runtime about our @SessionInject annotation type that we want to support as a new injection point
marker annotation. To do that, we need to implement our own HK2 InjectionResolver [https://hk2.java.net/
apidocs/org/glassfish/hk2/api/InjectionResolver.html] for the annotation as demonstrated in the following
listing:
import javax.inject.Inject;
import javax.inject.Named;
import javax.servlet.http.HttpSession;
import org.glassfish.hk2.api.InjectionResolver;
import org.glassfish.hk2.api.ServiceHandle;
...
@Inject
@Named(InjectionResolver.SYSTEM_RESOLVER_NAME)
InjectionResolver<Inject> systemInjectionResolver;
@Override
public Object resolve(Injectee injectee, ServiceHandle<?> handle) {
if (HttpSession.class == injectee.getRequiredType()) {
return systemInjectionResolver.resolve(injectee, handle);
}
return null;
}
@Override
public boolean isConstructorParameterIndicator() {
return false;
}
@Override
public boolean isMethodParameterIndicator() {
return false;
}
277
Custom Injection and
Lifecycle Management
The SessionInjectResolver above just delegates to the default HK2 system injection resolver to
do the actual work.
You again need to register your injection resolver with your Jersey application, and you can do it the same
was as in the previous case. Following listing includes HK2 binder that registers both, the injection provider
from the previous step as well as the new HK2 inject resolver with Jersey application ResourceConfig.
Note that in this case we're explicitly binding the SessionInjectResolver to a @Singleton [http://
docs.oracle.com/javaee/7/api/javax/inject/Singleton.html] scope to avoid the unnecessary proliferation of
SessionInjectResolver instances in the application:
import org.glassfish.hk2.api.TypeLiteral;
import org.glassfish.hk2.utilities.binding.AbstractBinder;
import javax.inject.Singleton;
...
public MyApplication() {
...
register(new AbstractBinder() {
@Override
protected void configure() {
bindFactory(HttpSessionFactory.class).to(HttpSession.class);
bind(SessionInjectResolver.class)
.to(new TypeLiteral<InjectionResolver<SessionInject>>(){})
.in(Singleton.class);
}
});
}
}
Following is an example of such a resource class that builds on the support for HttpSession injection
from the earlier examples described in this chapter. The PerSessionResource class allows you to
count the number of requests made within a single client session and provides you a handy sub-resource
method to obtain the number via a HTTP GET method call:
@Path("session")
278
Custom Injection and
Lifecycle Management
@GET
@Path("id")
public String getSession() {
counter.incrementAndGet();
return httpSession.getId();
}
@GET
@Path("count")
public int getSessionRequestCount() {
return counter.incrementAndGet();
}
}
Should the above resource be per-request scoped (default option), you would never be able to obtain any
other number but 1 from it's getReqs sub-resource method, because then for each request a new instance of
our PerSessionResource class would get created with a fresh instance counter field set to 0. The
value of this field would get incremented to 1 in the the getSessionRequestCount method before
this value is returned. In order to achieve what we want, we have to find a way how to bind the instances
of our PerSessionResource class to HttpSession instances and then reuse those bound instances
whenever new request bound to the same HTTP client session arrives. Let's see how to achieve this.
To get better control over your Jersey component instantiation and life cycle, you need to implement
a custom Jersey ComponentProvider [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
server/spi/ComponentProvider.html] SPI, that would manage your custom components. Although it might
seem quite complex to implement such a thing, the component provider concept in Jersey is in fact very
simple. It allows you to define your own HK2 injection bindings for the types that you are interested
in, while informing the Jersey runtime at the same time that it should back out and leave the component
management to your provider in such a case. By default, if there is no custom component provider found
for any given component type, Jersey runtime assumes the role of the default component provider and
automatically defines the default HK2 binding for the component type.
Following example shows a simple ComponentProvider implementation, for our use case. Some
comments on the code follow.
import javax.inject.Inject;
import javax.inject.Provider;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpSession;
...
import org.glassfish.hk2.api.DynamicConfiguration;
import org.glassfish.hk2.api.DynamicConfigurationService;
import org.glassfish.hk2.api.Factory;
import org.glassfish.hk2.api.PerLookup;
import org.glassfish.hk2.api.ServiceLocator;
import org.glassfish.hk2.utilities.binding.BindingBuilderFactory;
import org.glassfish.jersey.server.spi.ComponentProvider;
@javax.ws.rs.ext.Provider
279
Custom Injection and
Lifecycle Management
@Inject
public PerSessionFactory(
Provider<HttpServletRequest> request,
ServiceLocator locator) {
this.requestProvider = request;
this.locator = locator;
}
@Override
@PerLookup
public PerSessionResource provide() {
final HttpSession session = requestProvider.get().getSession();
if (session.isNew()) {
PerSessionResource newInstance = createNewPerSessionResource();
perSessionMap.put(session.getId(), newInstance);
return newInstance;
} else {
return perSessionMap.get(session.getId());
}
}
@Override
public void dispose(PerSessionResource r) {
}
@Override
public void initialize(ServiceLocator locator) {
this.locator = locator;
}
@Override
public boolean bind(Class<?> component, Set<Class<?>> providerContracts) {
280
Custom Injection and
Lifecycle Management
if (component == PerSessionResource.class) {
BindingBuilderFactory
.addBinding(BindingBuilderFactory.newFactoryBinder(PerSessionFactor
.to(PerSessionResource.class), dynamicConfiguration);
dynamicConfiguration.commit();
return true;
}
return false;
}
@Override
public void done() {
}
}
The first and very important aspect of writing your own ComponentProvider in Jersey is to store
the actual HK2 ServiceLocator [https://hk2.java.net/apidocs/org/glassfish/hk2/api/ServiceLocator.html]
instance that will be passed to you as the only argument of the provider initialize method. Your
component provider instance will not get injected at all so this is more less your only chance to get access to
the HK2 runtime of your application. Please bear in mind, that at the time when your component provider
methods get invoked, the ServiceLocator is not fully configured yet. This limitation applies to all
component provider methods, as the main goal of any component provider is to take part in configuring
the application's ServiceLocator.
Now let's examine the bind method, which is where your provider tells the HK2 how to bind your
component. Jersey will invoke this method multiple times, once for each type that is registered with the
actual application. Every time the bind method is invoked, your component provider needs to decide if it
is taking control over the component or not. In our case we know exactly which Java type we are interested
in (PerSessionResource class), so the logic in our bind method is quite straightforward. If we see
our PerSessionResource class it is our turn to provide our custom binding for the class, otherwise
we just return false to make Jersey poll other providers and, if no provider kicks in, eventually provide
the default HK2 binding for the component. Please, refer to the HK2 [http://hk2.java.net/] documentation
for the details of the concrete HK2 APIs used in the bind method implementation above. The main idea
behind the code is that we register a new HK2 Factory [https://hk2.java.net/apidocs/org/glassfish/hk2/api/
Factory.html] (PerSessionFactory), to provide the PerSessionResource instances to HK2.
The implementation of the PerSessionFactory is is also included above. Please note that as opposed
to a component provider implementation that should never itself rely on an injection support, the factory
bound by our component provider would get injected just fine, since it is only instantiated later, once the
Jersey runtime for the application is fully initialized including the fully configured HK2 runtime. Whenever
a new session is seen, the factory instantiates and injects a new PerSessionResource instance. The instance
is then stored in the perSessionMap for later use (for future calls).
In a real life scenario, you would want to pay more attention to possible synchronization issues. Also, we
do not consider a mechanism that would clean-up any obsolete resources for closed, expired or otherwise
invalidated HTTP client sessions. We have omitted those considerations here for the sake of brevity of
our example.
281
Chapter 24. Jersey CDI Container
Agnostic Support
24.1. Introduction
At the time of this writing, Java SE support is being discussed as one of important additions to CDI 2.0
specification. Existing CDI implementations brought this feature already, only container bootstrapping has
not yet been standardized. In Jersey version 2.15 we introduced Weld SE support, so that people could take
advantage of CDI features also when running in Java SE environment. As part of this work, the old Jersey
CDI module has been refactored so that it supports CDI integration in any CDI-enabled HTTP container.
Note
This chapter is mainly focused on server-side Jersey Weld SE support. We will mention other
containers that are known to be working with Jersey CDI integration modules. We will also
describe features demonstrated in Jersey HelloWorld Weld example and provide some hints on
how to enable Java SE support for other (non Weld) CDI implementations.
Apache Tomcat is another Servlet container that is known to work fine with Jersey CDI support. However,
things do not work there out of the box. You need to enable CDI support in Tomcat e.g. using Weld.
Jersey CDI example [https://github.com/jersey/jersey/tree/2.25.1/examples/cdi-webapp] shows how a
WAR application could be packaged (see tomcat-packaging profile in the pom file) in order to enable
JAX-RS/CDI integration in Tomcat with Jersey using Weld.
If not bundled already with underlying Servlet container, the following Jersey module needs to be packaged
with the application or otherwise included in the container class-path:
<dependency>
<groupId>org.glassfish.jersey.ext.cdi</groupId>
<artifactId>jersey-cdi1x</artifactId>
<version>2.25.1</version>
</dependency>
282
Jersey CDI Container
Agnostic Support
The key feature in CDI/Servlet integration is proper request scope binding. If this feature was missing,
you would not be able to use any request scoped CDI beans in your Jersey application. To make Jersey
work with CDI in containers that do not have request scope binding resolved, some extra work is required.
To allow smooth integration with Jersey request scope a new SPI, ExternalRequestScope [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/spi/ExternalRequestScope.html], was
introduced in Jersey version 2.15. An SPI implementation should be registered via the standard META-
INF/services mechanism and needs to make sure CDI implentation request scope has been properly
managed and request scoped data kept in the right context. For performance reasons, at most a single
external request scope provider is allowed by Jersey runtime.
<dependency>
<groupId>org.glassfish.jersey.ext.cdi</groupId>
<artifactId>jersey-weld2-se</artifactId>
<version>2.25.1</version>
</dependency>
Then you could use your CDI backed JAX-RS components in a Jersey application running in Grizzly
HTTP container bootstrapped as follows:
The above pattern could be applied also for other Jersey supported HTTP containers as long as you stick
with CDI Weld 2.x implementation. You simply add the above mentioned jersey-weld2-se module
into you class-path and bootstrap the Weld container manually before starting the HTTP container.
283
Chapter 25. Spring DI
Jersey provides an extension to support Spring DI. This enables Jersey to use Spring beans as JAX-
RS components (e.g. resources and providers) and also allows Spring to inject into Jersey managed
components.
The Spring extension module configuration is based on annotations. Spring beans are injected and JAX-RS
classes are made Spring managed using annotations. Injected Spring beans can have further dependencies
injected using Spring XML configuration. Spring singleton and request scopes are supported.
To enable JAX-RS resources to work Spring functionality that requires proxying, such as Spring
transaction management (with @Transactional), Spring Security and aspect oriented programming
(such as @Aspect), the resources must themselves be managed by Spring, by annotating with
@Component, @Service, @Controller or @Repository:
1 import javax.ws.rs.GET;
2 import javax.ws.rs.Path;
3 import org.springframework.stereotype.Component;
4
5 @Component
6 @Path("/")
7 public class SomeResource {
8
9 @Transactional
10 @GET
11 public void updateResource() {
12 // ...
13 }
14 }
15
Limitations:
• Spring beans can't be injected directly into JAX-RS classes by using Spring XML configuration
25.1. Dependencies
If you want to use Jersey Spring DI support you will need to add the jersey-spring3 module into
the list of your dependencies:
<dependency>
<groupId>org.glassfish.jersey.ext</groupId>
<artifactId>jersey-spring3</artifactId>
<version>2.25.1</version>
</dependency>
The above module adds transitive dependencies on Spring modules. See jersey-spring3
[https://jersey.java.net/project-info/2.25.1/jersey/project/jersey-spring3/dependencies.html] module
dependencies for more details about list and scope of dependencies. Please note the module depends on
The Spring/HK2 Bridge [https://hk2.java.net/spring-bridge/] that is used to inject Spring services into HK2
services or inject HK2 services into Spring services.
284
Spring DI
25.3. Example
To see an example of Spring DI support in Jersey refer to the Spring DI Example [https://github.com/
jersey/jersey/tree/2.25.1/examples/helloworld-spring-webapp].
285
Chapter 26. Jersey Test Framework
Jersey Test Framework originated as an internal tool used for verifying the correct implementation of
server-side components. Testing RESTful applications became a more pressing issue with "modern"
approaches like test-driven development and users started to look for a tool that could help with designing
and running the tests as fast as possible but with many options related to test execution environment.
Current implementation of Jersey Test Framework supports the following set of features:
Jersey Test Framework is primarily based on JUnit but you can run tests using TestNG as well. It works
almost out-of-the box and it is easy to integrate it within your Maven-based project. While it is usable on
all environments where you can run JUnit, we support primarily the Maven-based setups.
26.1. Basics
1 public class SimpleTest extends JerseyTest {
2
3 @Path("hello")
4 public static class HelloResource {
5 @GET
6 public String getHello() {
7 return "Hello World!";
8 }
9 }
10
11 @Override
12 protected Application configure() {
13 return new ResourceConfig(HelloResource.class);
14 }
15
16 @Test
17 public void test() {
18 final String hello = target("hello").request().get(String.class);
19 assertEquals("Hello World!", hello);
20 }
21 }
If you want to develop a test using Jersey Test Framework, you need to subclass JerseyTest [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/test/JerseyTest.html] and configure the set of
resources and/or providers that will be deployed as part of the test application. This short code snippet
shows basic resource class HelloResource used in tests defined as part of the SimpleTest class.
The overridden configure method returns a ResourceConfig [https://jersey.java.net/apidocs/2.25.1/
jersey/org/glassfish/jersey/server/ResourceConfig.html] of the test application,that contains only the
HelloResource resource class. ResourceConfig is a sub-class of JAX-RS Application [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Application.html]. It is a Jersey convenience
286
Jersey Test Framework
class for configuring JAX-RS applications. ResourceConfig also implements JAX-RS Configurable
[https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Configurable.html] interface to make
the application configuration more flexible.
Following is a brief description of all container factories supported in Jersey Test Framework.
<dependency>
<groupId>org.glassfish.jersey.test-framework.providers</groupId>
<artifactId>jersey-test-framework-provider-grizzly2</artifactId>
<version>2.25.1</version>
</dependency>
• In-Memory container is not a real container. It starts Jersey application and directly calls internal APIs
to handle request created by client provided by test framework. There is no network communication
involved. This containers does not support servlet and other container dependent features, but it is a
perfect choice for simple unit tests.
<dependency>
<groupId>org.glassfish.jersey.test-framework.providers</groupId>
<artifactId>jersey-test-framework-provider-inmemory</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.test-framework.providers</groupId>
287
Jersey Test Framework
<artifactId>jersey-test-framework-provider-jdk-http</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.test-framework.providers</groupId>
<artifactId>jersey-test-framework-provider-simple</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.test-framework.providers</groupId>
<artifactId>jersey-test-framework-provider-jetty</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.test-framework</groupId>
<artifactId>jersey-test-framework-core</artifactId>
<version>2.25.1</version>
</dependency>
<dependency>
<groupId>org.testng</groupId>
<artifactId>testng</artifactId>
<version>...</version>
</dependency>
To discuss the former requirement in more depth we need to take a look at the differences between
JUnit and TestNG. JUnit creates a new instance of a test class for every test present in that class
which, from the point of view of Jersey Test Framework, means that new test container and client is
created for each test of a test class. However, TestNG creates only one instance of a test class and the
initialization of the test container depends more on setup/teardown methods (driven by @BeforeXXX
and @AfterXXX annotations) than in JUnit. This means that, basically, you can start one instance of test
288
Jersey Test Framework
container for all tests present in a test class or separate test container for each and every test. For this
reason a separate subclasses of JerseyTestNg [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/test/JerseyTestNg.html] have been created:
• JerseyTestNg.ContainerPerClassTest [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/test/JerseyTestNg.ContainerPerClassTest.html] creates one container to run all the tests in. Setup
method is annotated with @BeforeClass, teardown method with @AfterClass.
For example take a look at ContainerPerClassTest test. It contains two test methods (first
and second), one singleton resource that returns an increasing sequence of number. Since we spawn
only one instance of a test container for the whole class the value expected in the first test is 1 and in
the second it's 2.
• JerseyTestNg.ContainerPerMethodTest [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/test/JerseyTestNg.ContainerPerMethodTest.html] creates separate container for each test. Setup
method is annotated with @BeforeMethod, teardown method with @AfterMethod.
289
Jersey Test Framework
We can create a similar test to the previous one. Take a look at ContainerPerMethodTest test. It
looks the same except the expected values and extending class: it contains two test methods (first and
second), one singleton resource that returns an increasing sequence of number. In this case we create
a separate test container for each test so value expected in the first test is 1 and in the second it's also 1.
If you need more complex setup of your test you can achieve this by directly extending the
JerseyTestNg [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/test/JerseyTestNg.html]
class create setup/teardown methods suited to your needs and provide a strategy for storing and handling
a test container / client instance (see JerseyTestNg.configureStrategy(TestNgStrategy)
method).
290
Jersey Test Framework
The code in the example above enables test traffic logging (inbound and outbound headers) as well as
dumping the HTTP message entity as part of the traffic logging.
<dependency>
<groupId>org.glassfish.jersey.test-framework.providers</groupId>
<artifactId>jersey-test-framework-provider-external</artifactId>
<version>2.25.1</version>
</dependency>
As indicated, the "container" exposed by this module is just a wrapper or stub, that redirects all request to
a configured host and port. Writing tests for this container is same as for any other but you have to provide
the information about host and port during the test execution:
291
Jersey Test Framework
You can set the value as a system property (via command line option) or directly in the test (to not affect
ports of other tests):
1 @Override
2 protected Application configure() {
3 // Find first available port.
4 forceSet(TestProperties.CONTAINER_PORT, "0");
5
6 return new ResourceConfig(Resource.class);
7 }
The easiest way to setup your JUnit or TestNG tests to run in parallel is to configure Maven Surefire
plugin. You can do this via configuration options parallel and threadCount, i.e.:
...
<configuration>
<parallel>methods</parallel>
<threadCount>5</threadCount>
...
</configuration>
...
For more information about this topic consult the following Maven Surefire articles:
292
Jersey Test Framework
293
Chapter 27. Building and Testing
Jersey
27.1. Checking Out the Source
Jersey source code is available on GitHub. You can browse the sources at https://github.com/jersey/jersey.
In case you are not familiar with Git, we recommend reading some of the many "Getting Started with Git"
articles you can find on the web. For example this DZone RefCard [http://refcardz.dzone.com/refcardz/
getting-started-git].
To clone the Jersey repository you can execute the following command on the command-line (provided
you have a command-line Git client installed on your machine):
This creates read-only copy of Jersey workspace. If you want to contribute, please use "pull request":
https://help.github.com/articles/creating-a-pull-request.
Milestones and releases of Jersey are tagged. You can list the tags by executing the standard Git command
in the repository directory:
git tag -l
or by visiting https://github.com/jersey/jersey/tags.
It is recommended to build all of Jersey after you cloned the source code repository. To do that execute the
following commands in the directory where jersey source repository was cloned (typically the directory
named "jersey"):
This command will build Jersey, but skip the test execution. If you don't want to skip the tests, execute
the following instead:
Building the whole Jersey project including tests could take significant amount of time.
27.3. Testing
Jersey contains many tests. Unit tests are in the individual Jersey modules, integration and end-to-end tests
are in jersey/tests/e2e directory. You can run tests related to a particular area using the following
command:
294
Building and Testing Jersey
where pattern may be a comma separated set of names matching tests classes or individual methods
(like LinkTest#testDelimiters).
295
Chapter 28. Migration Guide
28.1. Migrating from Jersey 2.22 to 2.23
28.1.1. Release 2.23 Highlights
28.1.1.1. Introducing LoggingFeature
From version 2.23 onwards, LoggingFilter has been replaced with LoggingFeature [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/logging/LoggingFeature.html].
296
Migration Guide
Please note, that the trailing slash is significant, so that if the URI ends with a slash (http://
server.com/api/management/user/), the output will be:
Alternatively, the entire URI resolving logic can be switched off by newly introduced
ServerProperties.LOCATION_HEADER_RELATIVE_URI_RESOLUTION_DISABLED [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
ServerProperties.html#LOCATION_HEADER_RELATIVE_URI_RESOLUTION_DISABLED]
property. If the value is true, Jersey will not change the URI contained in the Location header at
all (even if this behaviour may not match with behaviour described in JavaDoc).
• MOXy support for for Java API for JSON Processing (JSR-353) [https://wiki.eclipse.org/EclipseLink/
DesignDocs/405161]
297
Migration Guide
• Jersey Reactive Client API. Also Reactive Client moved from incubator to extension (umbrella) module.
These APIs are now part of the official public Jersey 2.x API.
• org.glassfish.jersey.apache.connector.ApacheClientProperties - constant
SSL_CONFIG has been removed. Use ClientBuilder [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/client/ClientBuilder.html] methods to configure SSL in a Client [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/Client.html] instance.
• org.glassfish.jersey.jetty.connector.JettyClientProperties - constant
SSL_CONFIG has been removed. Use ClientBuilder [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/
javax/ws/rs/client/ClientBuilder.html] methods to configure SSL in a Client [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/Client.html] instance.
298
Migration Guide
cases of client asynchronous request execution, server-side managed asynchronous request processing
as well as server-side background task scheduler.
Previously, all Jersey connectors have been using their own default chunk size when HTTP
chunked coding was used. Since Jersey 2.16, there is a new default chunk size value used
by all connectors, if a custom chunk size is not set. The new default value is stored under
ClientProperties.DEFAULT_CHUNK_SIZE [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/ClientProperties.html#DEFAULT_CHUNK_SIZE] client property.
• org.glassfish.jersey.apache.connector.ApacheClientProperties - constant
SSL_CONFIG has been marked as deprecated and will be removed in a subsequent release. Use
ClientBuilder [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/ClientBuilder.html]
methods to configure SSL in a Client [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
client/Client.html] instance.
299
Migration Guide
• org.glassfish.jersey.jetty.connector.JettyClientProperties - constant
SSL_CONFIG has been marked as deprecated and will be removed in a subsequent release. Use
ClientBuilder [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/ClientBuilder.html]
methods to configure SSL in a Client [https://jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/
client/Client.html] instance.
<dependency>
<groupId>org.glassfish.jersey.core</groupId>
<artifactId>jersey-common</artifactId>
<version>${pre-2.16-version}</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.media</groupId>
<artifactId>jersey-media-jaxb</artifactId>
<version>2.25.1</version>
</dependency>
• MediaType's quality source parameters (qs) reuse the same parsing as quality parameters. This means
that values higher than 1.0 throw ParseException. I.e. following example is not allowed any more:
@Path("/")
@Produces("text/html;qs=5") // wrong 'qs' value
public class Bookstore { ... }
300
Migration Guide
<dependency>
<groupId>org.glassfish.jersey.containers.glassfish</groupId>
<artifactId>jersey-gf-cdi</artifactId>
<version>${pre-2.15-version}</version>
</dependency>
<dependency>
<groupId>org.glassfish.jersey.ext.cdi</groupId>
<artifactId>jersey-cdi1x</artifactId>
<version>2.25.1</version>
</dependency>
The following needs to be included in addition if you want to leverage CDI JTA support:
<dependency>
<groupId>org.glassfish.jersey.ext.cdi</groupId>
<artifactId>jersey-cdi1x-transaction</artifactId>
<version>2.25.1</version>
</dependency>
These APIs are now part of the official public Jersey 2.x API.
301
Migration Guide
These APIs are now part of the official public Jersey 2.x API.
28.10.1.3. Jackson 1
We have reintroduced support for JSON processing via Jackson 1.x JSON provider (1.9.11). In order to
use Jackson 1 in your application you need to add jersey-media-json-jackson1 module (+ it's
dependencies) to your class-path and register Jackson1Feature in your application (server or client).
28.10.1.4. ClientLifecycleListener
Client-side providers (such asClientRequestFilters) implementing the new
org.glassfish.jersey.client.ClientLifecycleListener interface will be notified
when various lifecycle events occur. Currently client runtime initialization triggers the onInit()
method and client closing triggers onClose() method. Such providers implementing the
ClientLifecycleListener can be registered in a common way, e.g. into a JerseyClient or
JerseyWebTarget instance, or into a (potentially) auto discoverable feature context.
302
Migration Guide
28.12.1.2. Jackson 2
Our media module that supports working with JSON via Jackson library has been updated to use Jackson
2.x (2.3.2). All samples and tests have been rewritten to use Jackson 2 as well. In order to use Jackson 2 in
your application you need to add jersey-media-json-jackson (+ it's Jackson dependencies) to your class-
path and register JacksonFeature in your application.
28.12.1.3. META-INF/services
We dropped automatic registration of message body providers (MessageBodyWriter,
MessageBodyReader) and exception mappers via META-INF/services mechanism. This functionality can
be restored by adding jersey-metainf-services module to the class-path of your application.
Note: This change may affect 3rd party libraries (e.g. Jackson 2.x) in a way their provider would not be
registered in an JAX-RS app. You need to either register them manually or use mentioned jersey-
metainf-services module.
28.12.2. Changes
• Some of the feature specific configuration properties (disable WADL, disable BV, disable
JSON-Processing, enable Monitoring), and their server/client counterparts, are no longer
affected by a value of properties CommonProperties.FEATURE_AUTO_DISCOVERY_DISABLE
or CommonProperties.METAINF_SERVICES_LOOKUP_DISABLE. The specific properties
have to be used to change default behaviour of mentioned features (e.g.
ServerProperties.WADL_FEATURE_DISABLE).
303
Migration Guide
• The Jackson JSON Jersey module has been updated to use Jackson 2.x instead of Jackson 1.x. This
means that all the code that has been using Jackson 1.x for JSON (de)serialization has to be migrated
to Jackson 2.x.
• SseFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/sse/
SseFeature.html] now gets automatically discovered and enabled if the SSE
module is present on the class path. This behavior can be suppressed by
setting DISABLE_SSE [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/sse/
SseFeature.html#DISABLE_SSE] property to true. The behavior can also be selectively suppressed
in either client or server runtime by setting the DISABLE_SSE_CLIENT [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/media/sse/SseFeature.html#DISABLE_SSE_CLIENT] or
DISABLE_SSE_SERVER [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/media/
sse/SseFeature.html#DISABLE_SSE_SERVER] property respectively.
• In Jersey 2.7 and earlier it was (under certain conditions) possible to supply
custom TestContainerFactory [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/test/
spi/TestContainerFactory.html] as part of the tested JAX-RS / Jersey application. This factory
would be picked and used by JerseyTest [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/test/JerseyTest.html] to instantiate TestContainer [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/test/spi/TestContainer.html] that will host the tested application. This feature
was unreliable and redundant. As such, support for the feature has been removed. To
specify a custom TestContainerFactory to be used by your JerseyTest subclass,
please override the JerseyTest.getTestContainerFactory method instead. Overriding
getTestContainerFactory now remains the only reliable way of specifying custom
TestContainerFactory implementation to be used in your tests.
• Protected method setTestContainerFactory has been removed from the JerseyTest API
as calling the method had no effect on the TestContainerFactory instance used by the
JerseyTest subclass.
304
Migration Guide
• Protected method getClient has been removed from the JerseyTest API. To configure test client
instances, please override the configureClient method instead.
• Several configuration properties were renamed, especially those having client and server versions along
with the common version in CommonProperties. Please see following table for complete reference:
Constant Old value (Jersey 2.7 and New value (Jersey 2.8+)
before)
ClientProperties.FEATURE_AUTO_DISCOVERY_DISABLE
jersey.config.disableAutoDiscovery.client
jersey.config.client.disableAutoDis
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/client/
ClientProperties.html#FEATURE_AUTO_DISCOVERY_DISABLE]
ServerProperties.FEATURE_AUTO_DISCOVERY_DISABLE
jersey.config.disableAutoDiscovery.server
jersey.config.server.disableAutoDis
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/server/
ServerProperties.html#FEATURE_AUTO_DISCOVERY_DISABLE]
305
Migration Guide
Constant Old value (Jersey 2.7 and New value (Jersey 2.8+)
before)
ClientProperties.JSON_PROCESSING_FEATURE_DISABLE
jersey.config.disableJsonProcessing.client
jersey.config.client.disableJsonPro
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/client/
ClientProperties.html#JSON_PROCESSING_FEATURE_DISABLE]
ServerProperties.JSON_PROCESSING_FEATURE_DISABLE
jersey.config.disableJsonProcessing.server
jersey.config.server.disableJsonPro
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/server/
ServerProperties.html#JSON_PROCESSING_FEATURE_DISABLE]
ClientProperties.METAINF_SERVICES_LOOKUP_DISABLE
jersey.config.disableMetainfServicesLookup.client
jersey.config.client.disableMetainf
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/client/
ClientProperties.html#METAINF_SERVICES_LOOKUP_DISABLE]
ServerProperties.METAINF_SERVICES_LOOKUP_DISABLE
jersey.config.disableMetainfServicesLookup.server
jersey.config.server.disableMetainf
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/server/
ServerProperties.html#METAINF_SERVICES_LOOKUP_DISABLE]
ClientProperties.MOXY_JSON_FEATURE_DISABLE
jersey.config.disableMoxyJson.client
jersey.config.client.disableMoxyJso
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/client/
ClientProperties.html#MOXY_JSON_FEATURE_DISABLE]
ServerProperties.MOXY_JSON_FEATURE_DISABLE
jersey.config.disableMoxyJson.server
jersey.config.server.disableMoxyJso
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/server/
ServerProperties.html#MOXY_JSON_FEATURE_DISABLE]
ClientProperties.OUTBOUND_CONTENT_LENGTH_BUFFER
jersey.config.contentLength.buffer.client
jersey.config.client.contentLength.
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/client/
ClientProperties.html#OUTBOUND_CONTENT_LENGTH_BUFFER]
ServerProperties.OUTBOUND_CONTENT_LENGTH_BUFFER
jersey.config.contentLength.buffer.server
jersey.config.server.contentLength.
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/server/
ServerProperties.html#OUTBOUND_CONTENT_LENGTH_BUFFER]
ServerProperties.TRACING jersey.config.server.tracing
jersey.config.server.tracing.type
[https://jersey.java.net/
apidocs/2.25.1/jersey/org/
glassfish/jersey/server/
ServerProperties.html#TRACING]
306
Migration Guide
The old names are still working for now, but are deprecated. There is a fallback mechanism implemented
while reading the property and each get, that resolves the value from the old-named property, will log
a CONFIG level warning.
• A minor JAX-RS incompatibility issue has been recently discovered and reported (see JERSEY-2387
[https://java.net/jira/browse/JERSEY-2387]). As part of the fix, minor breaking changes related to
URI resolving and creation have been introduced in the behavior of UriBuilder [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/UriBuilder.html], Link.Builder [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Link.Builder.html] and WebTarget [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/WebTarget.html] classes. It is no longer possible to
successfully build a new URI instance from a UriBuilder that contains unresolved template
parameters. An IllegalArgumentException will be thrown in such case, as mandated by JAX-
RS API javadoc. Similarly, it is not possible to successfully create a Link [https://jersey.java.net/
apidocs-javax.jax-rs/2.0.1/javax/ws/rs/core/Link.html] instance from a URI template with unresolved
template parameters. Also, it is not possible to successfully send a request on a WebTarget that
represents a URI template that does not have all the template parameters properly resolved. Any attempt
to do so will fail with an exception. Note that this also applies to any managed clients injected into JAX-
RS server-side components using Uri [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
server/Uri.html] annotation.
In Jersey 2.6 and earlier, producing a URI from an incompletely resolved URI template would succeed
and all unresolved template parameter locations would be encoded without change into the resulting
URI, for example "/path/{param}" would be implicitly encoded as "/path/%7Bparam%7D".
While we do not expect our users to depend on this functionality, if the former behavior is desired for
some reason, UriComponent.encodeTemplateNames method can be used instead:
URI.create(UriComponent.encodeTemplateNames(UriBuilder.fromUri("/path/{param}").t
or simply
URI.create(UriComponent.encodeTemplateNames("/path/{param}"));
307
Migration Guide
New bundle has been created for Guava (bundles/repackaged/jersey-guava), with Maven
coordinates: org.glassfish.jersey.bundles.repackaged:jersey-guava
(Repackaged) ASM is now part of Jersey Server. Jersey currently uses ASM 5 for package-scanning
capabilities.
• org.glassfish.jersey.message.internal.HttpDateFormat - method
getPreferedDateFormat() has been marked as deprecated due to typo in the name. New method
getPreferredDateFormat() should be used instead.
• org.glassfish.jersey.client.filter.HttpBasicAuthFilter and
org.glassfish.jersey.client.filter.HttpDigestAuthFilter (use
HttpAuthenticationFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/
authentication/HttpAuthenticationFeature.html] instead)
• org.glassfish.jersey.apache.connector.ApacheClientProperties.HTTP_PARAMS
(use
org.glassfish.jersey.apache.connector.ApacheClientProperties#REQUEST_CONFIG
instead),
org.glassfish.jersey.apache.connector.ApacheClientProperties.PROXY_URI,
org.glassfish.jersey.apache.connector.ApacheClientProperties.PROXY_USERNAME,
org.glassfish.jersey.apache.connector.ApacheClientProperties.PROXY_PASSWORD
(use corresponding ClientProperties [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
client/ClientProperties.html] instead.
• org.glassfish.jersey.server.validation.ValidationConfig.setMessageInterpolator
org.glassfish.jersey.server.validation.ValidationConfig.setTraversableResolver
org.glassfish.jersey.server.validation.ValidationConfig.setConstraintValidatorFac
org.glassfish.jersey.server.validation.ValidationConfig.setParameterNameProvider
(use corresponding methods of the same class without "set" prefix in the method names).
• MVC does not allow to specify the resolving class. Resolving class is used to create a path of the
template. Changes are:
308
Migration Guide
was obsolete and therefore removed. Resolving class now always the resource class in which the MVC
resource method is defined).
• org.glassfish.jersey.server.mvc.freemarker.FreemarkerProperties (use
FreemarkerMvcFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/mvc/
freemarker/FreemarkerMvcFeature.html] instead)
• org.glassfish.jersey.server.model.RuntimeResource.getFirstParentResource()
(use Resource.getParent() [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/
model/Resource.html#getParent()] instead).
• WADL is by default displayed in the simplified form. It does not contain supporting resources
like OPTIONS methods or /application.wadl itself. In order to get the full WADL use
query param detail=true. For example make a GET request to http://localhost:8080/
application.wadl?detail=true.
Jersey client uses chunked encoding (streaming) for serialization of the entity as a default option. Before
Jersey 2.5 release entity buffering has been used by default. The size of the chunk can still be controlled
by ClientProperties.CHUNKED_ENCODING_SIZE [https://jersey.java.net/apidocs/2.25.1/jersey/org/
glassfish/jersey/client/ClientProperties.html#CHUNKED_ENCODING_SIZE] property, this property
however no longer enforces the use of chunked encoding. To control request
entity buffering and chunked transfer coding selection, please utilize use the new
ClientProperties.REQUEST_ENTITY_PROCESSING [https://jersey.java.net/apidocs/2.25.1/jersey/
org/glassfish/jersey/client/ClientProperties.html#REQUEST_ENTITY_PROCESSING] property. The
behaviour of the property is however not unified across the available Connector [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/client/spi/Connector.html] implementations
and depends on the connector implementation configured for the Client [https://
jersey.java.net/apidocs-javax.jax-rs/2.0.1/javax/ws/rs/client/Client.html] instance. Default connector
produced by HttpUrlConnectorProvider [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/HttpUrlConnector.html] still uses buffering as default options due to bugs
in HttpURLConnection. On the other hand, Jetty HTTP Client based connectors
produced by JettyConnectorProvider [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/
jetty/connector/JettyConnectorProvider.html] do not support chunked encoding at all.
309
Migration Guide
Please note that this is not a newly introduced limitation - it's merely an official acknowledgement of
the fact that different connectors have different capabilities and limitations - something that has always
been part of the individual connector implementations, it just was not publicly acknowledged.
310
Migration Guide
MustacheMvcFeature.html] from
jersey.config.server.mvc.caching.mustache.enabled to
jersey.config.server.mvc.caching.mustache.
• Authentication filters
org.glassfish.jersey.client.filter.HttpBasicAuthFilter and
org.glassfish.jersey.client.filter.HttpDigestAuthFilter were deprecated
and replaced by HttpAuthenticationFeature [https://jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/
jersey/client/authentication/HttpAuthenticationFeature.html].
• All EJB and CDI integration classes have been moved into internal Jersey packages, to clearly state the
integration code should not be used as a public API.
311
Migration Guide
312
Migration Guide
Singleton or PerRequest scopes. Jersey 2.x uses HK2 as dependency injection framework and users are
also able to register custom classes or instances to be injected in various scopes.
Main difference in Jersey 2.x is that you don't need to create special classes or providers for this task;
everything should be achievable using HK2 API. Custom injectables can be registered at ResourceConfig
level by adding new HK2 Module or by dynamically adding binding almost anywhere using injected HK2
Services instance.
@Override
protected void configure() {
// request scope binding
bind(MyInjectablePerRequest.class).to(MyInjectablePerRequest.class).in(Requ
// singleton binding
bind(MyInjectableSingleton.class).in(Singleton.class);
// singleton instance binding
bind(new MyInjectableSingleton()).to(MyInjectableSingleton.class);
}
@Inject
public MyApplication(ServiceLocator serviceLocator) {
System.out.println("Registering injectables...");
313
Migration Guide
DynamicConfiguration dc = Injections.getConfiguration(serviceLocator);
// singleton binding
Injections.addBinding(
Injections.newBinder(MyInjectableSingleton.class)
.to(MyInjectableSingleton.class)
.in(Singleton.class),
dc);
// commits changes
dc.commit();
}
@Override
public Set<Class<?>> getClasses() {
return ...
}}
1. com.sun.jersey.spi.container.ContainerListener
2. com.sun.jersey.spi.container.ContainerNotifier
Containers, which support the reload functionality implement the ContainerListener interface, so
that once you get access to the actual container instance, you could call it's onReload method and get
the container re-load the config. The second interface helps you to obtain the actual container instance
reference. An example on how things are wired together follows.
314
Migration Guide
3
4 public Reloader() {
5 ls = new ArrayList<ContainerListener>();
6 }
7
8 public void addListener(ContainerListener l) {
9 ls.add(l);
10 }
11
12 public void reload() {
13 for (ContainerListener l : ls) {
14 l.onReload();
15 }
16 }
17 }
In Jersey 2, two interfaces are involved again, but these have been re-designed.
1. org.glassfish.jersey.server.spi.Container
2. org.glassfish.jersey.server.spi.ContainerLifecycleListener
The Container interface introduces two reload methods, which you can call to get the
application re-loaded. One of these methods allows to pass in a new ResourceConfig instance.
You can register your implementation of ContainerLifecycleListener the same way as
any other provider (i.e. either by annotating it by @Provider [https://jersey.java.net/apidocs-javax.jax-
rs/2.0.1/javax/ws/rs/ext/Provider.html] annotation or adding it to the Jersey ResourceConfig [https://
jersey.java.net/apidocs/2.25.1/jersey/org/glassfish/jersey/server/ResourceConfig.html] directly either
using the class (using ResourceConfig.addClasses()) or registering a particular instance using
ResourceConfig.addSingletons() method.
315
Migration Guide
16 }
17
18 @Override
19 public void onReload(Container container) {
20 // ignore or do whatever you want after reload has been done
21 }
22
23 @Override
24 public void onShutdown(Container container) {
25 // ignore or do something after the container has been shutdown
26 }
27 }
316
Migration Guide
Notes
Jersey
JAX-
1.x
RS
Class
2.0
Class
jersey.java.net/
apidocs-
javax.jax-
rs/2.0.1/
javax/
ws/
rs/
client/
Client.html]
WebTarget
com.sun.jersey.api.client.WebResource
[http://
[https://
jersey.java.net/
nonav/
apidocs-
apidocs/1.17/
javax.jax-
jersey/
rs/2.0.1/
com/
javax/
sun/
ws/
jersey/
rs/
api/
client/
client/
WebTarget.html]
WebResource.html]
You can access async versions of the async methods by calling
com.sun.jersey.api.client.AsyncWebResource
WebTarget
[http://
[https://
WebTarget.request().async()
jersey.java.net/
nonav/
apidocs-
apidocs/1.17/
javax.jax-
jersey/
rs/2.0.1/
com/
javax/
sun/
ws/
jersey/
rs/
api/
client/
client/
WebTarget.html]
AsyncWebResource.html]
317
Migration Guide
318
Migration Guide
.sslContext(sslContext)
.hostnameVerifier(hostnameVerifier)
.build();
In Jersey 1.x, the JAXB/JSON Support was implemented as a set of MessageBodyReaders and
MessageWriters in the jersey-json module. Internally, there were several implementations
of JSON to Object mapping ranging from Jersey's own custom solution to third party providers,
such as Jackson or Jettison. The configuration of the JSON support was centralized in the
JSONConfiguration and JSONJAXBContext classes.
28.21.3.1. Initialization
There are three main JSON-mapping handling approaches, which are preserved in Jersey 2: JAXB-based,
POJO mapping and Low-level parsing The following table shows how to enable each of them in both
Jersey 2 compared to Jersey 1:
<dependency>
<groupId>org.glassfish.jersey.media</groupId>
<artifactId>jersey-media-moxy</artifactId>
<version>2.25.1</version>
</dependency>
319
Migration Guide
Note
For JAXB-based support, MOXy is the default way in Jersey 2. However, other providers
(Jackson, Jettison) can be used as well. The relevant feature has to be registered (and
dependency added) and custom implementation of ContextResolver has to be provided. See
the code snippets in the related chapter.
For more on particular Feature registration, see also: Jackson registration, Jettison registration,
MOXy registration, JSON-P registration.
It is important to point out, that the Feature registration has to be done separately for client
and server.
Note
With Jersey 2.9, Jackson has been updated to version 2.3.2. The feature is still configured via
mentioned ObjectMapper class, but the package has changed.
28.21.3.3. Configuration
As mentioned, the centralized configuration of Jersey 1's JSONConfiguration does not have a direct
equivalent in Jersey 2. Each provider has it's own way to be configured. Detailed description of each
method and property is out of scope of this migration guide and can be found in the documentation and
APIs of the relevant providers and/or the relevant Jersey module API. Bellow are several basic examples
how to configure certain options when using MOXy with Jersey's MoxyJsonConfig class.
• Formated output
Jersey 1: JSONConfiguration.createJSONConfigurationWithFormatted()
• Namespaces mapping
Jersey 1: JSONConfiguration.natural().xml2JsonNs()
320
Migration Guide
• Namespace separator
Jersey 1: JSONConfiguration.natural().nsSeparator()
More on the JSON Support topic can be found in Section 9.1, “JSON”.
321
Appendix A. Configuration Properties
A.1. Common (client/server) configuration
properties
List of common configuration properties that can be found in CommonProperties [https://jersey.java.net/
apidocs/2.25.1/jersey/org/glassfish/jersey/CommonProperties.html] class. All of these properties can be
overridden by their server/client counterparts.
322
Configuration Properties
323
Configuration Properties
324
Configuration Properties
325
Configuration Properties
326
Configuration Properties
327
Configuration Properties
328
Configuration Properties
329
Configuration Properties
330
Configuration Properties
331
Configuration Properties
332
Configuration Properties
333
Configuration Properties
334