ContainerRequestFilter is not executed in JAX-RS / RESTEasy application

Question

I am trying to create a filter for a REST API I have developed following these question Best practice for REST token-based authentication with JAX-RS and Jersey.

The problem is whatever of the methods I am invoking the filter doesnt appear to work.

These are my classes:

Secured.java

@NameBinding
@Retention(RetentionPolicy.RUNTIME)
@Target({ElementType.TYPE, ElementType.METHOD})
public @interface Secured { 

}

AuthenticationFilter.java

@Secured
@Provider
@Priority(Priorities.AUTHENTICATION)
public class AuthenticationFilter implements ContainerRequestFilter{

    @Override
    public void filter(ContainerRequestContext requestContext) throws IOException {
        // Get the HTTP Authorization header from the request
        String authorizationHeader = 
            requestContext.getHeaderString(HttpHeaders.AUTHORIZATION);

        // Check if the HTTP Authorization header is present and formatted correctly 
        if (authorizationHeader == null || !authorizationHeader.startsWith("Bearer ")) {
            throw new NotAuthorizedException("Authorization header must be provided");
        }

        // Extract the token from the HTTP Authorization header
        String token = authorizationHeader.substring("Bearer".length()).trim();

        try {

            // Validate the token
            validateToken(token);

        } catch (Exception e) {
            requestContext.abortWith(
                Response.status(Response.Status.UNAUTHORIZED).build());
        }
    }

    private void validateToken(String token) throws Exception {
        // Check if it was issued by the server and if it's not expired
        // Throw an Exception if the token is invalid
    }

}

RestService.java

@Path("/test")
public class RestService {

TestDAO testDAO;

    @GET
    @Secured
    @Path("/myservice")
    @Produces("application/json")
    public List<Test> getEverisTests() {
        testDAO=(TestDAO) SpringApplicationContext.getBean("testDAO");

        long start = System.currentTimeMillis();

        List<Test> ret =  testDAO.getTests();

        long end = System.currentTimeMillis();

        System.out.println("TIEMPO TOTAL: " + (end -start));

        return ret;

    }
}

RestApplication.java

public class RestApplication extends Application{
    private Set<Object> singletons = new HashSet<Object>();

    public RestApplication() {
        singletons.add(new RestService());
        singletons.add(new AuthenticationFilter());
    }

    @Override
    public Set<Object> getSingletons() {
        return singletons;
    }
}

I am missing something? Thanks in advance.

Ensure your `AuthenticationFilter` is registered. What does your `Application` subclass looks like? — cassiomolin, Apr 19 '17 at 15:05

cassiomolin · Answer 1 · 2017-04-19T15:17:32.910

6

Your AuthenticationFilter may not be registered.

It's very likely you have an Application subclass somewhere in your application. Use it to register the filter:

@ApplicationPath("api")
public class ApiConfig extends Application {

    @Override
    public Set<Class<?>> getClasses() {
        HashSet<Class<?>> classes = new HashSet<>();
        classes.add(AuthenticationFilter.class);
        ...
        return classes;
    }
}

edited Apr 19 '17 at 15:17

answered Apr 19 '17 at 15:10

cassiomolin

124,154
35
280
359

Thanks for the answer! My filter was registered in my Application subclass. The problem was the modules of resteasy in the jboss installation. – A1t0r Apr 20 '17 at 08:40

A1t0r · Accepted Answer · 2017-04-20T08:37:55.500

1

The solution was to update Jboss modules of resteasy following this page resteasy and selecting the version of resteasy that I was using.

Thanks for the answers by the way!

edited Apr 20 '17 at 08:37

answered Apr 20 '17 at 08:20

A1t0r

469
5
26

score 0 · Answer 3 · answered Apr 19 '17 at 14:57

0

I can't yet comment so this goes into an answer:

I don't understand how the @Secured mechanism works. Did you try to remove all @Secured annotations? The filter should then be active for all endpoints.

If it still does not work most probably you will have to register it manually in your application.

If it does work afterwards you have at least a hint on where to look for the problem ...

answered Apr 19 '17 at 14:57

martinw

364
2
7

1

The `@Secured` is a [name binding annotation](http://stackoverflow.com/a/38523942/1426227). It binds the filter to one or more resource classes and/or methods. – cassiomolin Apr 19 '17 at 15:06
1

Cool, I overlooked the @NameBinding annotation. Thanks! – martinw Apr 19 '17 at 15:27

ContainerRequestFilter is not executed in JAX-RS / RESTEasy application

3 Answers3