Jakarta RESTful Web Services4.03.13.02.12.0
This feature enables support for Jakarta RESTful Web Services 4.0. These annotations can be used to define web service clients and endpoints that comply with the REST architectural style. Endpoints are accessed through a common interface that is based on the HTTP standard methods.
If you are updating your application from using the restfulWS-3.1 feature to using the restfulWS-4.0 feature, changes in API behavior might require you to update your application code. For more information, see Differences between Jakarta RESTful Web Services 4.0 and 3.1.
Enabling this feature
To enable the Jakarta RESTful Web Services 4.0 feature, add the following element declaration into your server.xml file, inside the featureManager element:
<feature>restfulWS-4.0</feature>
Examples
Access security details with a context object
In RESTful Web Services applications, you can use annotations to add dependency injections of context objects that access information from HTTP requests. Context objects can provide information that is associated with the application such as the specific HTTP request or response, or the application environment. In the following example, the @Context annotation injects the SecurityContext context object in the Jakarta API that provides access to security details, such as user credentials:
@Context
SecurityContext sec;
@GET
@Path("/getGroups")
public Set<String> getGroups() {
Set<String> groups = null;
Principal user = sec.getUserPrincipal();
if (user instanceof JsonWebToken) {
JsonWebToken jwt = (JsonWebToken) user;
groups= = jwt.getGroups();
}
return groups;
}To access security details, the SecurityContext context object uses the sec.getUserPrincipal() method that determines the identity of the user that makes the HTTP request. The if statement specifies the JSONWebToken claims that identify the user.
Inject the MicroProfile JWT interface to access application resources
You can inject interfaces in RESTful Web Services applications to access resources, such as user details. In the following example, the @Inject annotation injects the JsonWebToken interface in the Jakarta API to obtain the jwtPrincipal object that contains details from the MicroProfile JWT that identifies the user:
@RequestScoped
public class JwtEndpoint {
@Inject
private JsonWebToken jwtPrincipal;
@GET
@Path("/getInjectedPrincipal")
public String getInjectedJWT() {
return this.jwtPrincipal.getName();
}
}
