...
Code Block | ||||
---|---|---|---|---|
| ||||
public class CustomerService {
public void doIt(String a, String b) {...};
}
|
...
Code Block | ||||
---|---|---|---|---|
| ||||
@Path("/customers/{a}") public class CustomerService { public void doIt(@PathParam("a") String a, String b) {...}; } |
Note that CXF Continuations API is supported for both JAXWS and JAXRS services.
Dealing with contexts
When combining JAXWS and JAXRS, one may need to access some context information as part of processing a given request. At the moment, CXF JAXRS does not offer a context implementation which can be used to access a request-specific information common for both JAXWS and JAXRS requests, in cases when the same methods are used to handle both JAXWS and JAXRS requests. Please use a JAXWS WebServiceContext and JAXRS contexts or CXF JAXRS composite MessageContext :
Code Block | ||||
---|---|---|---|---|
| ||||
@Path("/customers")
@WebService
public class CustomerService {
@Resource WebServiceContext jaxwsContext;
@Resource MessageContext jaxrsContext;
@WebMethod
@POST
public void doIt(String b) {
isUserInRole();
};
private void isUserInRole() throws WebApplicationException {
if (jaxwsContext.getSecurityContext() != null) {
// soap invocation
jaxwsContext.getSecurityContext().isUserInRole(theRole);
} else {
// http-only jaxrs one
jaxrsContext.getSecurityContext().isUserInRole(theRole);
}
}
}
|
Note that injected context instances (jaxwsContext and jaxrsContext) are in fact thread-local proxies hence they will not be equal to null even if they do not represent a given request. For example, jaxrsContext will not be equal to null even if it's not a JAXWS invocation which is being processed at the moment.
However, if say a (JAXWS or JAXRS) SecurityContext needs to be accessed then it will be set in, say, jaxwsContext only if it's a JAXWS/SOAP invocation. For this reason it can be handy using a composite CXF JAXRS MessageContext when accessing a JAXRS-specific context information when combining JAXWS and JAXRS as one can easily check if it's actually a JAXRS request by simply checking an individual context like SecurityContext or UriInfo for null.
Using individual contexts like JAXRS SecurityContext might be less attractive :
Code Block | ||||
---|---|---|---|---|
| ||||
@WebService
public class CustomerService {
@Resource WebServiceContext jaxwsContext;
// @Resource can be applied too
@Context SecurityContext jaxrsSecurityContext;
}
|
as some methods of SecurityContext return boolean values so only throwing a runtime exception can reliably indicate that this context is actually not in scope.
Note that if you do not share the same service methods between JAXRS and JAXWS invocations then you can directly access corresponding contexts :
Code Block | ||||
---|---|---|---|---|
| ||||
@Path("/customers")
@WebService
public class CustomerService {
@Resource WebServiceContext jaxwsContext;
@Resource MessageContext jaxrsContext;
@WebMethod
public void doItSoap(String b) {
isUserInRole(jaxwsContext.getSecurityContext().getPrincipal());
};
@POST
public void doItSoap(String b) {
isUserInRole(jaxrsContext.getSecurityContext().getPrincipal());
}
private void isUserInRole(Principal p) throws WebApplicationException {
...
}
}
|
JAX-RS and Spring AOP
CXF JAX-RS is capable of working with AOP interceptors applied to resource classes from Spring.
For example :
...