Package org.operaton.bpm.webapp.neo.impl.engine

Class EngineRestApplication

java.lang.Object

jakarta.ws.rs.core.Application

org.operaton.bpm.webapp.neo.impl.engine.EngineRestApplication

public class EngineRestApplication
extends jakarta.ws.rs.core.Application

The engine REST API, served from inside the webapp so that it shares the webapp's session and filter chain.

The SPA previously talked to the standalone /engine-rest deployment, which authenticates each request on its own and therefore forced the client to keep credentials around to re-send. Mounted here at {applicationPath}/api/engine/* the same requests are authenticated by the webapp session instead, and pass through the CSRF and header-security filters on the way.

Registers the named engine service, so resources live under /api/engine/engine/{engine}/.... That is the layout securityFilterRules.json is written against — it denies /api/engine/.* wholesale and re-allows only /api/engine/engine/{engine}/.* through EngineRequestAuthorizer — so the alternative, mounting the default engine service at the root of this application, would be denied by the rules that protect it.

Constructor Summary

Constructors

Constructor	Description
EngineRestApplication()

Method Summary

Modifier and Type	Method	Description
Set<Class<?>>	getClasses()

Methods inherited from class jakarta.ws.rs.core.Application

getProperties, getSingletons

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

EngineRestApplication

public EngineRestApplication()

Method Details

getClasses

public Set<Class<?>> getClasses()

Overrides:

getClasses in class jakarta.ws.rs.core.Application