Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
  • Jan 31 2019 23:02
    jebeaudet commented #3314
  • Jan 31 2019 22:50
    joakime commented #3314
  • Jan 31 2019 22:50
    joakime commented #3314
  • Jan 31 2019 22:48
    joakime commented #3314
  • Jan 31 2019 22:46
    olamy commented #2878
  • Jan 31 2019 22:45
    jebeaudet commented #3314
  • Jan 31 2019 22:41
    joakime commented #3314
  • Jan 31 2019 22:39
    joakime commented #3314
  • Jan 31 2019 22:26
    jebeaudet edited #3314
  • Jan 31 2019 22:24
    jebeaudet opened #3314
  • Jan 31 2019 17:28
    sbordet commented #3313
  • Jan 31 2019 17:20
    sbordet review_requested #3313
  • Jan 31 2019 17:20
    sbordet review_requested #3313
  • Jan 31 2019 17:20
    sbordet opened #3313
  • Jan 31 2019 17:18

    sbordet on jetty-10.0.x-1350-dynamic_client_transport

    Issue #1350 - Dynamic selection… (compare)

  • Jan 31 2019 16:37

    sbordet on jetty-10.0.x-132_client_connector

    (compare)

  • Jan 31 2019 16:37

    sbordet on jetty-10.0.x

    Issue #132 - ClientConnector ab… Issue #132 - ClientConnector ab… Issue #132 - ClientConnector ab… and 2 more (compare)

  • Jan 31 2019 16:37
    sbordet closed #3267
  • Jan 31 2019 16:15
    sbordet synchronize #3312
  • Jan 31 2019 16:15

    sbordet on jetty-9.4.x-3311-http_https_same_port

    Fixes #3311 - Ability to serve … (compare)

zeeklumpkins
@zeeklumpkins
@joakime yeah don't see that call...are session ids required to do https? tbh if I can avoid session ids I would prefer that; I am working on a security SRG and there are an annoying number of session requirements that I think are avoidable if I am not doing IDs...
Joakim Erdfelt
@joakime
"session ids" are an ambiguous term
are you referring to HttpSession (java) for Session (http header)?
or are you referring to Session (TLS/SSL) for encryption?
TLS has "Session ids" as well. but those are handled by the TLS protocol, and are typically managed by the TLS implementation.
You have exposure to it via java, see javax.net.ssl.SSLSocket.getSession()
zeeklumpkins
@zeeklumpkins
@joakime mm whichever would be shared to the client I think...I think it is what would get served up by the SessionIDManager.. the text of an item I am checking says 'Session IDs are tokens generated by web applications to uniquely identify an application user's session'
trepidacious
@trepidacious
@joakime Yes you're right - I'll try that. I don't use proguard much, still trying to find what to do to leave everything in those classes completely unaltered...
zeeklumpkins
@zeeklumpkins
@joakime the server does have a setHandler; it is a ContextHandlerCollection (we have the option to set up http and/or https). it sets up a basic ContextHandler. If I can disable session ids and cookies it would make my life easier lol. I just want to serve up basic files over https...
zeeklumpkins
@zeeklumpkins
Maybe a more general question...if I want a jetty server to just serve up files over https (just need a very lightweight service), do I need session ids (like the JSESSIONID?) or even any cookies enabled?
as far as http vs https, that's just ServerConnector and HttpConfiguration setup.
unrelated to the handler tree
Mike Liu
@mikexliu
Hi, my company uses veracode and as part of the scan, it found that ConfigurableSpnegoLoginService.java:181 may suffer from http://cwe.mitre.org/data/definitions/384.html. Just wanted to check if this may be a concern or if it's a false positive scan?
Joakim Erdfelt
@joakime
Mike Liu
@mikexliu
@joakime filed: eclipse/jetty.project#3627 thanks!
David J. M. Karlsen
@davidkarlsen
usually I see releases on central soon after the tag has been made - is it stuck at staging this time?
a staged potential release (at oss.sonatype.org btw) can take a while to review, sometimes a full week. often a few days at least.
David J. M. Karlsen
@davidkarlsen
:thumbsup:
David (javalin.io)
@tipsy
can i use session to determine if a websocket upgrade request should be allowed or not? (in embedded jetty)
currently my websocket servlet is a org.eclipse.jetty.websocket.servlet.WebSocketServlet, which doesn't seem to have access to the session
Joakim Erdfelt
@joakime
Write a WebSocketCreator to handle the upgrade your way, that's at the HTTP level (which has access to the HttpSession).
@tipsy use jetty-users mailing list , stackoverflow, or the issue tracker please.
Joakim Erdfelt
@joakime
people don't check this often enough.
David (javalin.io)
@tipsy
oh, okay
will do in the future, thank you!
rhuitl
@rhuitl
Hi guys, do you have a rough estimate for the 9.4.28 release date?
Viacheslav Petriaiev
@Viacheslav-Petriaiev

Hi,

I've implemented the Jetty HTTP client logging approach which is described here: https://www.baeldung.com/spring-log-webclient-calls
But spring-cloud-sleuth has no instrumentation support for the Jetty HTTP client

Do you have any suggestions on how to implement Jetty HTTP client support with distributed tracing with sleuth?

Thank you

Anbarasan
@aanbarasan
Anybody knows this error?
java.lang.IllegalStateException: Destroyed container cannot be restarted
Inside karaf container I am getting this exception
Or Goshen
@Oberonc
hi
I've got a new user question
a servlet container such as jetty can run persistent services that arent servlets and that are accessible to the servlets ?
.. that run in its JVM context
my case:
suppose I want to create in memory graph hierarchy and be able to query it from servlets .. is it possible to do it myself in the context of the Jetty JVM or do I have to use an external implementation (such as graphdb)
suppose I create a singleton called "Hierarchy" inside a war folder I deployed .. how do I make it persistent and not get garbage collected ?
Ragnar Rova
@rrva
hello! I am trying to build a graalvm native image for a web socket server based on org.eclipse.jetty.websocket:websocket-jetty-server:11.0.11. It fails at runtime with
Exception in thread "main" java.lang.Error: java.lang.NoSuchMethodException: java.lang.Byte.valueOf(java.lang.String)
    at org.eclipse.jetty.util.TypeUtil.<clinit>(TypeUtil.java:180)
    at org.eclipse.jetty.http.PreEncodedHttpField.<clinit>(PreEncodedHttpField.java:42)
    at org.eclipse.jetty.http.MimeTypes$Type.<init>(MimeTypes.java:91)
    at org.eclipse.jetty.http.MimeTypes$Type.<clinit>(MimeTypes.java:49)
    at org.eclipse.jetty.http.MimeTypes.lambda$static$0(MimeTypes.java:169)
    at org.eclipse.jetty.util.Index$Builder.withAll(Index.java:346)
    at org.eclipse.jetty.http.MimeTypes.<clinit>(MimeTypes.java:166)
    at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:878)
    at org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:306)
    at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
    at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:171)
    at org.eclipse.jetty.server.Server.start(Server.java:469)
    at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
    at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:89)
    at org.eclipse.jetty.server.Server.doStart(Server.java:414)
    at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:93)
    at se.rrva.EventServer.start(EventServer.java:66)
    at se.rrva.Main.main(Main.java:14)
Caused by: java.lang.NoSuchMethodException: java.lang.Byte.valueOf(java.lang.String)
    at java.lang.Class.getMethod(DynamicHub.java:2108)
    at org.eclipse.jetty.util.TypeUtil.<clinit>(TypeUtil.java:151)
    ... 17 more
1 reply
Mantas Matūzas
@mantoshelis
Hello, is there any way to set Logbook logger for Jetty HttpClient imported from org.eclipse.jetty:jetty-reactive-httpclient?