方法TRACE,HEAD,DELETE,CONNECT,OPTIONS,PUT的安全WS端点

时间:2018-11-13 13:59:14

标签: web-services jboss jboss-eap-7

从Jboss EAP 6.4迁移到EAP 7.1后,我在服务器日志中注意到以下消息:

09:39:48,847 WARN  [io.undertow.servlet] (ServerService Thread Pool -- 92) UT015020: Path /HeatManager is secured for some HTTP methods, however it is not secured for [TRACE, HEAD, DELETE, CONNECT, OPTIONS, PUT]

09:39:48,848 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 92) WFLYUT0021: Web-Kontext registriert: "/heat-ws" für Server "default-server"

HeatManager是在Java类中声明为的Web服务

@WebService(name = "HeatManager", targetNamespace = Configuration.WEBSERVICE_NAMESPACE + "HeatManager", portName = "HeatManagerSOAP")

,并在jboss-webservices.xml中作为

<context-root>heat-ws</context-root>
<port-component>
<ejb-name>HeatManagerImpl</ejb-name>
<auth-method>BASIC</auth-method>
<transport-guarantee>NONE</transport-guarantee>
<secure-wsdl-access>true</secure-wsdl-access>
</port-component>

如何为我的端点保护所有这些方法?

0 个答案:

没有答案