org.ow2.authzforce.jaxrs.util

Class JsonRiJaxrsProvider

java.lang.Object

org.ow2.authzforce.jaxrs.util.JsonRiJaxrsProvider

All Implemented Interfaces:

javax.ws.rs.ext.MessageBodyReader<org.json.JSONObject>, javax.ws.rs.ext.MessageBodyWriter<org.json.JSONObject>

@Produces(value={"application/json","application/*+json"})
 @Consumes(value={"application/json","application/*+json"})
 @Provider
public final class JsonRiJaxrsProvider
extends Object
implements javax.ws.rs.ext.MessageBodyReader<org.json.JSONObject>, javax.ws.rs.ext.MessageBodyWriter<org.json.JSONObject>

JAX-RS entity provider for JSONObject input/output

Constructor Summary

Constructors

Constructor and Description
JsonRiJaxrsProvider() Constructs JSON provider using default insecure JSONTokener.
JsonRiJaxrsProvider(org.everit.json.schema.Schema schema) Constructs JSON provider using default insecure JSONTokener with JSON schema validation.
JsonRiJaxrsProvider(org.everit.json.schema.Schema schema, int maxJsonStringSize, int maxNumOfImmediateChildren, int maxDepth) Constructs JSON provider using hardened JSONTokener that checks limits on JSON structures, such as arrays and strings, in order to mitigate content-level attacks.

Method Summary

Modifier and Type	Method and Description
long	getSize(org.json.JSONObject o, Class<?> type, Type genericType, Annotation[] annotations, javax.ws.rs.core.MediaType mediaType)
boolean	isReadable(Class<?> type, Type genericType, Annotation[] annotations, javax.ws.rs.core.MediaType mediaType)
boolean	isWriteable(Class<?> type, Type genericType, Annotation[] annotations, javax.ws.rs.core.MediaType mediaType)
org.json.JSONObject	readFrom(Class<org.json.JSONObject> type, Type genericType, Annotation[] annotations, javax.ws.rs.core.MediaType mediaType, javax.ws.rs.core.MultivaluedMap<String,String> httpHeaders, InputStream entityStream)
void	writeTo(org.json.JSONObject o, Class<?> type, Type genericType, Annotation[] annotations, javax.ws.rs.core.MediaType mediaType, javax.ws.rs.core.MultivaluedMap<String,Object> httpHeaders, OutputStream entityStream)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JsonRiJaxrsProvider

public JsonRiJaxrsProvider()

Constructs JSON provider using default insecure JSONTokener. Only for trusted environments or protected by JSON-threat-mitigating proxy (e.g. WAF as in Web Application Firewall)

JsonRiJaxrsProvider

public JsonRiJaxrsProvider(org.everit.json.schema.Schema schema)

Constructs JSON provider using default insecure JSONTokener with JSON schema validation. Only for trusted environments or protected by JSON-threat-mitigating proxy (e.g. WAF as in Web Application Firewall)

Parameters:

schema - JSON schema, null iff no schema validation shall occur

JsonRiJaxrsProvider

public JsonRiJaxrsProvider(org.everit.json.schema.Schema schema,
                           int maxJsonStringSize,
                           int maxNumOfImmediateChildren,
                           int maxDepth)

Constructs JSON provider using hardened JSONTokener that checks limits on JSON structures, such as arrays and strings, in order to mitigate content-level attacks. Downside: it is slower at parsing than for JsonRiJaxrsProvider().

Parameters:

schema - JSON schema, null iff no schema validation shall occur

maxJsonStringSize - allowed maximum size of JSON keys and string values. If negative or zero, limits are ignored and this is equivalent to JsonRiJaxrsProvider().

maxNumOfImmediateChildren - allowed maximum number of keys (therefore key-value pairs) in JSON object, or items in JSON array. If negative or zero, limits are ignored and this is equivalent to JsonRiJaxrsProvider().

maxDepth - allowed maximum depth of JSON object. If negative or zero, limits are ignored and this is equivalent to JsonRiJaxrsProvider().

Method Detail

isWriteable

public boolean isWriteable(Class<?> type,
                           Type genericType,
                           Annotation[] annotations,
                           javax.ws.rs.core.MediaType mediaType)

Specified by:

isWriteable in interface javax.ws.rs.ext.MessageBodyWriter<org.json.JSONObject>

getSize

public long getSize(org.json.JSONObject o,
                    Class<?> type,
                    Type genericType,
                    Annotation[] annotations,
                    javax.ws.rs.core.MediaType mediaType)

Specified by:

getSize in interface javax.ws.rs.ext.MessageBodyWriter<org.json.JSONObject>

writeTo

public void writeTo(org.json.JSONObject o,
                    Class<?> type,
                    Type genericType,
                    Annotation[] annotations,
                    javax.ws.rs.core.MediaType mediaType,
                    javax.ws.rs.core.MultivaluedMap<String,Object> httpHeaders,
                    OutputStream entityStream)
             throws IOException,
                    javax.ws.rs.WebApplicationException

Specified by:

writeTo in interface javax.ws.rs.ext.MessageBodyWriter<org.json.JSONObject>

Throws:

IOException

javax.ws.rs.WebApplicationException

isReadable

public boolean isReadable(Class<?> type,
                          Type genericType,
                          Annotation[] annotations,
                          javax.ws.rs.core.MediaType mediaType)

Specified by:

isReadable in interface javax.ws.rs.ext.MessageBodyReader<org.json.JSONObject>

readFrom

public org.json.JSONObject readFrom(Class<org.json.JSONObject> type,
                                    Type genericType,
                                    Annotation[] annotations,
                                    javax.ws.rs.core.MediaType mediaType,
                                    javax.ws.rs.core.MultivaluedMap<String,String> httpHeaders,
                                    InputStream entityStream)
                             throws IOException,
                                    javax.ws.rs.WebApplicationException

Specified by:

readFrom in interface javax.ws.rs.ext.MessageBodyReader<org.json.JSONObject>

Throws:

IOException

javax.ws.rs.WebApplicationException