This is an automated email from the ASF dual-hosted git repository. robertlazarski pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/axis-axis2-java-core.git
commit 4c949a758f13a23351f970de9ff1229c2fd86cfb Author: Robert Lazarski <[email protected]> AuthorDate: Sat Sep 5 13:07:02 2026 -1000 Remove the exploded WAR left in springbootdemo-tomcat11 The earlier artifact removal in a8f79972fa took the classes and archives but left the XML and properties behind. Four of them duplicated src/main/resources and resources-axis2 exactly; beans.xml and the jboss descriptors belong to springbootdemo-wildfly, which holds the maintained copies, and both the README and the Tomcat 11 user guide already describe them as absent here. WEB-INF/ and META-INF/ at the module root are now ignored wholesale. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> --- .../userguide/springbootdemo-tomcat11/.gitignore | 12 +- .../springbootdemo-tomcat11/META-INF/MANIFEST.MF | 7 - .../axis2-json-api/pom.properties | 3 - .../userguide.springboot/axis2-json-api/pom.xml | 367 ---------------- .../springbootdemo-tomcat11/WEB-INF/beans.xml | 2 - .../WEB-INF/classes/ESAPI.properties | 461 --------------------- .../WEB-INF/classes/application.properties | 2 - .../WEB-INF/classes/log4j2.xml | 40 -- .../springbootdemo-tomcat11/WEB-INF/conf/axis2.xml | 352 ---------------- .../WEB-INF/jboss-deployment-structure.xml | 10 - .../springbootdemo-tomcat11/WEB-INF/jboss-web.xml | 2 - 11 files changed, 6 insertions(+), 1252 deletions(-) diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/.gitignore b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/.gitignore index 48e339d73d..517dc4faa4 100644 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/.gitignore +++ b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/.gitignore @@ -1,6 +1,6 @@ -# Build artifacts — produced by mvn install, not source -WEB-INF/lib/ -WEB-INF/modules/ -WEB-INF/services/ -WEB-INF/classes/userguide/ -target/ +# Build artifacts — produced by mvn install, not source. +# Webapp source lives under src/main/; a META-INF/ or WEB-INF/ directory at the +# module root is always an exploded WAR that got left behind. +META-INF/ +WEB-INF/ +target/ diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/MANIFEST.MF b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/MANIFEST.MF deleted file mode 100644 index 1511b0c7fe..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/MANIFEST.MF +++ /dev/null @@ -1,7 +0,0 @@ -Manifest-Version: 1.0 -Created-By: Maven WAR Plugin 3.5.1 -Java-Version: 21 -Build-Jdk-Spec: 25 -Implementation-Title: axis2-json-api -Implementation-Version: 0.0.1-SNAPSHOT - diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/maven/userguide.springboot/axis2-json-api/pom.properties b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/maven/userguide.springboot/axis2-json-api/pom.properties deleted file mode 100644 index 9fc93f53c3..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/maven/userguide.springboot/axis2-json-api/pom.properties +++ /dev/null @@ -1,3 +0,0 @@ -artifactId=axis2-json-api -groupId=userguide.springboot -version=0.0.1-SNAPSHOT diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/maven/userguide.springboot/axis2-json-api/pom.xml b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/maven/userguide.springboot/axis2-json-api/pom.xml deleted file mode 100644 index 8930ebabad..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/META-INF/maven/userguide.springboot/axis2-json-api/pom.xml +++ /dev/null @@ -1,367 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> - -<!-- - ~ Licensed to the Apache Software Foundation (ASF) under one - ~ or more contributor license agreements. See the NOTICE file - ~ distributed with this work for additional information - ~ regarding copyright ownership. The ASF licenses this file - ~ to you under the Apache License, Version 2.0 (the - ~ "License"); you may not use this file except in compliance - ~ with the License. You may obtain a copy of the License at - ~ - ~ http://www.apache.org/licenses/LICENSE-2.0 - ~ - ~ Unless required by applicable law or agreed to in writing, - ~ software distributed under the License is distributed on an - ~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY - ~ KIND, either express or implied. See the License for the - ~ specific language governing permissions and limitations - ~ under the License. - --> - -<project xmlns="http://maven.apache.org/POM/4.0.0"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; - xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd";> - <modelVersion>4.0.0</modelVersion> - - <groupId>userguide.springboot</groupId> - <artifactId>axis2-json-api</artifactId> - <version>0.0.1-SNAPSHOT</version> - <packaging>war</packaging> - <name>axis2-json-api</name> - <description>Spring Boot with Axis2 demo</description> - - <parent> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-parent</artifactId> - <version>3.4.3</version> - <relativePath/> <!-- lookup parent from repository --> - </parent> - - <properties> - <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> - <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding> - <java.version>21</java.version> - <spring-boot.version>3.4.3</spring-boot.version> - <axis2.version>2.0.1-SNAPSHOT</axis2.version> - </properties> - - <dependencies> - <dependency> - <groupId>org.springframework.boot</groupId> - <!-- Required in this userguide for - org.springframework.dao.DataAccessException - --> - <artifactId>spring-boot-starter-data-jpa</artifactId> - <exclusions> - <exclusion> - <groupId>com.zaxxer</groupId> - <artifactId>HikariCP</artifactId> - </exclusion> - </exclusions> - </dependency> - <dependency> - <groupId>org.apache.commons</groupId> - <artifactId>commons-lang3</artifactId> - <version>3.20.0</version> - </dependency> - <dependency> - <groupId>jakarta.activation</groupId> - <artifactId>jakarta.activation-api</artifactId> - <version>2.1.4</version> - </dependency> - <dependency> - <groupId>org.eclipse.angus</groupId> - <artifactId>angus-activation</artifactId> - <version>2.0.3</version> - </dependency> - <dependency> - <groupId>org.glassfish.jaxb</groupId> - <artifactId>jaxb-runtime</artifactId> - <version>4.0.5</version> - </dependency> - <dependency> - <groupId>org.glassfish.jaxb</groupId> - <artifactId>jaxb-xjc</artifactId> - <version>4.0.5</version> - </dependency> - <dependency> - <groupId>jakarta.xml.bind</groupId> - <artifactId>jakarta.xml.bind-api</artifactId> - <version>4.0.4</version> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-log4j2</artifactId> - </dependency> - <dependency> - <groupId>org.apache.logging.log4j</groupId> - <artifactId>log4j-jul</artifactId> - <version>2.25.3</version> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-devtools</artifactId> - <scope>runtime</scope> - </dependency> - <dependency> - <groupId>org.apache.commons</groupId> - <artifactId>commons-collections4</artifactId> - <version>4.4</version> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-test</artifactId> - <scope>test</scope> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-configuration-processor</artifactId> - <optional>true</optional> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-validation</artifactId> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter</artifactId> - <exclusions> - <exclusion> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-logging</artifactId> - </exclusion> - </exclusions> - </dependency> - <dependency> - <groupId>jakarta.servlet</groupId> - <artifactId>jakarta.servlet-api</artifactId> - <version>6.1.0</version> - <scope>provided</scope> - </dependency> - <dependency> - <groupId>org.springframework.boot</groupId> - <artifactId>spring-boot-starter-security</artifactId> - <version>3.4.3</version> - </dependency> - <dependency> - <groupId>commons-io</groupId> - <artifactId>commons-io</artifactId> - <version>2.21.0</version> - </dependency> - <dependency> - <groupId>commons-codec</groupId> - <artifactId>commons-codec</artifactId> - <version>1.19.0</version> - </dependency> - <dependency> - <groupId>commons-validator</groupId> - <artifactId>commons-validator</artifactId> - <version>1.10.1</version> - </dependency> - <!-- Axis2 core (JSON-RPC/MCP only — SOAP deps excluded) --> - <dependency> - <groupId>org.apache.axis2</groupId> - <artifactId>axis2-kernel</artifactId> - <version>2.0.1-SNAPSHOT</version> - <exclusions> - <!-- SOAP/WS-* deps not needed for JSON-RPC/MCP --> - <exclusion><groupId>org.apache.axis2</groupId><artifactId>axis2-saaj</artifactId></exclusion> - <!-- Codegen/WSDL tools not needed at runtime --> - <exclusion><groupId>org.apache.axis2</groupId><artifactId>axis2-codegen</artifactId></exclusion> - <exclusion><groupId>org.apache.axis2</groupId><artifactId>axis2-adb-codegen</artifactId></exclusion> - </exclusions> - </dependency> - <dependency> - <groupId>org.apache.axis2</groupId> - <artifactId>axis2-transport-http</artifactId> - <version>2.0.1-SNAPSHOT</version> - </dependency> - <dependency> - <groupId>org.apache.axis2</groupId> - <artifactId>axis2-transport-local</artifactId> - <version>2.0.1-SNAPSHOT</version> - </dependency> - <dependency> - <groupId>org.apache.axis2</groupId> - <artifactId>axis2-json</artifactId> - <version>2.0.1-SNAPSHOT</version> - </dependency> - <dependency> - <groupId>org.apache.axis2</groupId> - <artifactId>axis2-adb</artifactId> - <version>2.0.1-SNAPSHOT</version> - </dependency> - <dependency> - <groupId>org.apache.axis2</groupId> - <artifactId>axis2-spring</artifactId> - <version>2.0.1-SNAPSHOT</version> - </dependency> - <dependency> - <groupId>org.apache.axis2</groupId> - <artifactId>axis2-openapi</artifactId> - <version>${axis2.version}</version> - </dependency> - <!-- HTTP/2 Transport --> - <dependency> - <groupId>org.apache.axis2</groupId> - <artifactId>axis2-transport-h2</artifactId> - <version>2.0.1-SNAPSHOT</version> - </dependency> - <dependency> - <groupId>org.apache.httpcomponents.core5</groupId> - <artifactId>httpcore5-h2</artifactId> - <version>5.4.3</version> - </dependency> - <!-- Axiom (XML object model — still needed by kernel internals) --> - <dependency> - <groupId>org.apache.ws.commons.axiom</groupId> - <artifactId>axiom-impl</artifactId> - <version>2.0.0</version> - </dependency> - <dependency> - <groupId>org.apache.ws.commons.axiom</groupId> - <artifactId>axiom-jakarta-activation</artifactId> - <version>2.0.0</version> - </dependency> - <!-- Deps still needed at runtime (transitive from kernel) --> - <dependency> - <groupId>org.codehaus.woodstox</groupId> - <artifactId>stax2-api</artifactId> - <version>4.2.1</version> - </dependency> - <!-- commons-fileupload --> - <dependency> - <groupId>org.apache.commons</groupId> - <artifactId>commons-fileupload2-core</artifactId> - <version>2.0.0-M5</version> - </dependency> - <dependency> - <groupId>org.apache.commons</groupId> - <artifactId>commons-fileupload2-jakarta-servlet6</artifactId> - <version>2.0.0-M5</version> - </dependency> - <dependency> - <groupId>org.owasp.esapi</groupId> - <artifactId>esapi</artifactId> - <version>2.7.0.0</version> - <classifier>jakarta</classifier> - </dependency> - <dependency> - <groupId>org.apache.httpcomponents.core5</groupId> - <artifactId>httpcore5</artifactId> - <version>5.4.3</version> - </dependency> - <dependency> - <groupId>org.apache.httpcomponents.client5</groupId> - <artifactId>httpclient5</artifactId> - <version>5.6.3</version> - </dependency> - </dependencies> - <build> - <plugins> - <plugin> - <groupId>org.apache.maven.plugins</groupId> - <artifactId>maven-dependency-plugin</artifactId> - <version>3.8.1</version> - <executions> - <execution> - <id>unpack</id> - <phase>package</phase> - <goals> - <goal>unpack</goal> - </goals> - <configuration> - <artifactItems> - <artifactItem> - <groupId>userguide.springboot</groupId> - <artifactId>axis2-json-api</artifactId> - <version>0.0.1-SNAPSHOT</version> - <type>war</type> - <overWrite>false</overWrite> - <outputDirectory>${project.build.directory}/deploy/axis2-json-api</outputDirectory> - <includes>**/*.class,**/*.xml</includes> - <excludes>**/*test.class</excludes> - </artifactItem> - </artifactItems> - <includes>**/*.java</includes> - <excludes>**/*.properties</excludes> - <overWriteReleases>true</overWriteReleases> - <overWriteSnapshots>true</overWriteSnapshots> - </configuration> - </execution> - </executions> - </plugin> - <plugin> - <groupId>org.apache.maven.plugins</groupId> - <artifactId>maven-antrun-plugin</artifactId> - <version>3.1.0</version> - <executions> - <execution> - <id>install</id> - <phase>prepare-package</phase> - <configuration> - <target> - <jar jarfile="${project.build.directory}/deploy/axis2-json-api/WEB-INF/services/Login.aar"> - <metainf file="resources-axis2/login_resources/services.xml"/> - </jar> - <jar jarfile="${project.build.directory}/deploy/axis2-json-api/WEB-INF/services/testws.aar"> - <metainf file="resources-axis2/test_service_resources/services.xml"/> - </jar> - <jar jarfile="${project.build.directory}/deploy/axis2-json-api/WEB-INF/services/BigDataH2Service.aar"> - <metainf file="resources-axis2/bigdata_h2_resources/services.xml"/> - </jar> - <jar jarfile="${project.build.directory}/deploy/axis2-json-api/WEB-INF/services/FinancialBenchmarkService.aar"> - <metainf file="resources-axis2/finbench_resources/services.xml"/> - </jar> - <copy todir="${project.build.directory}/deploy/axis2-json-api/WEB-INF/conf"> - <fileset dir="resources-axis2/conf"> - <include name="axis2.xml"/> - </fileset> - </copy> - <mkdir dir="${project.build.directory}/deploy/axis2-json-api/WEB-INF/modules"/> - <copy file="${settings.localRepository}/org/apache/axis2/axis2-openapi/${axis2.version}/axis2-openapi-${axis2.version}.jar" - tofile="${project.build.directory}/deploy/axis2-json-api/WEB-INF/modules/openapi-${axis2.version}.mar" - overwrite="true"/> - <!-- The exploded WAR is at target/deploy/axis2-json-api/ (produced by - maven-war-plugin's exploded goal). No separate unzip step needed. - For Tomcat deployment, copy this directory to webapps/axis2-json-api. --> - </target> - </configuration> - <goals> - <goal>run</goal> - </goals> - </execution> - </executions> - </plugin> - <plugin> - <groupId>org.apache.maven.plugins</groupId> - <artifactId>maven-war-plugin</artifactId> - <version>3.5.1</version> - <configuration> - <webResources> - <resource> - <directory>src/main/resources</directory> - <includes> - <include>**/*.xml</include> - <include>**/application.properties</include> - </includes> - <targetPath>WEB-INF/classes</targetPath> - <filtering>true</filtering> - </resource> - </webResources> - <webappDirectory>${project.build.directory}/deploy/axis2-json-api</webappDirectory> - </configuration> - <executions> - <execution> - <id>enforce-java</id> - <goals> - <goal>exploded</goal> - </goals> - </execution> - </executions> - </plugin> - </plugins> - - </build> - -</project> diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/beans.xml b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/beans.xml deleted file mode 100644 index 0dcf6b4460..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/beans.xml +++ /dev/null @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<beans xmlns="https://jakarta.ee/xml/ns/jakartaee"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://jakarta.ee/xml/ns/jakartaee/beans_4_0.xsd"; version="4.0" bean-discovery-mode="none"></beans> diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/classes/ESAPI.properties b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/classes/ESAPI.properties deleted file mode 100644 index b57a4fddd8..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/classes/ESAPI.properties +++ /dev/null @@ -1,461 +0,0 @@ -# -# OWASP Enterprise Security API (ESAPI) Properties file -- PRODUCTION Version -# -# This file is part of the Open Web Application Security Project (OWASP) -# Enterprise Security API (ESAPI) project. For details, please see -# http://www.owasp.org/index.php/ESAPI. -# -# Copyright (c) 2008,2009 - The OWASP Foundation -# -# DISCUSS: This may cause a major backwards compatibility issue, etc. but -# from a name space perspective, we probably should have prefaced -# all the property names with ESAPI or at least OWASP. Otherwise -# there could be problems is someone loads this properties file into -# the System properties. We could also put this file into the -# esapi.jar file (perhaps as a ResourceBundle) and then allow an external -# ESAPI properties be defined that would overwrite these defaults. -# That keeps the application's properties relatively simple as usually -# they will only want to override a few properties. If looks like we -# already support multiple override levels of this in the -# DefaultSecurityConfiguration class, but I'm suggesting placing the -# defaults in the esapi.jar itself. That way, if the jar is signed, -# we could detect if those properties had been tampered with. (The -# code to check the jar signatures is pretty simple... maybe 70-90 LOC, -# but off course there is an execution penalty (similar to the way -# that the separate sunjce.jar used to be when a class from it was -# first loaded). Thoughts? -############################################################################### -# -# WARNING: Operating system protection should be used to lock down the .esapi -# resources directory and all the files inside and all the directories all the -# way up to the root directory of the file system. Note that if you are using -# file-based implementations, that some files may need to be read-write as they -# get updated dynamically. -# -# Before using, be sure to update the MasterKey and MasterSalt as described below. -# N.B.: If you had stored data that you have previously encrypted with ESAPI 1.4, -# you *must* FIRST decrypt it using ESAPI 1.4 and then (if so desired) -# re-encrypt it with ESAPI 2.0. If you fail to do this, you will NOT be -# able to decrypt your data with ESAPI 2.0. -# -# YOU HAVE BEEN WARNED!!! More details are in the ESAPI 2.0 Release Notes. -# -#=========================================================================== -# ESAPI Configuration -# -# If true, then print all the ESAPI properties set here when they are loaded. -# If false, they are not printed. Useful to reduce output when running JUnit tests. -# If you need to troubleshoot a properties related problem, turning this on may help. -# This is 'false' in the src/test/resources/.esapi version. It is 'true' by -# default for reasons of backward compatibility with earlier ESAPI versions. -ESAPI.printProperties=true - -# ESAPI is designed to be easily extensible. You can use the reference implementation -# or implement your own providers to take advantage of your enterprise's security -# infrastructure. The functions in ESAPI are referenced using the ESAPI locator, like: -# -# String ciphertext = -# ESAPI.encryptor().encrypt("Secret message"); // Deprecated in 2.0 -# CipherText cipherText = -# ESAPI.encryptor().encrypt(new PlainText("Secret message")); // Preferred -# -# Below you can specify the classname for the provider that you wish to use in your -# application. The only requirement is that it implement the appropriate ESAPI interface. -# This allows you to switch security implementations in the future without rewriting the -# entire application. -# -# ExperimentalAccessController requires ESAPI-AccessControlPolicy.xml in .esapi directory -ESAPI.AccessControl=org.owasp.esapi.reference.DefaultAccessController -# FileBasedAuthenticator requires users.txt file in .esapi directory -ESAPI.Authenticator=org.owasp.esapi.reference.FileBasedAuthenticator -ESAPI.Encoder=org.owasp.esapi.reference.DefaultEncoder -ESAPI.Encryptor=org.owasp.esapi.reference.crypto.JavaEncryptor - -ESAPI.Executor=org.owasp.esapi.reference.DefaultExecutor -ESAPI.HTTPUtilities=org.owasp.esapi.reference.DefaultHTTPUtilities -ESAPI.IntrusionDetector=org.owasp.esapi.reference.DefaultIntrusionDetector -ESAPI.Logger=org.owasp.esapi.logging.java.JavaLogFactory - -ESAPI.Randomizer=org.owasp.esapi.reference.DefaultRandomizer -ESAPI.Validator=org.owasp.esapi.reference.DefaultValidator - -#=========================================================================== -# ESAPI Authenticator -# -Authenticator.AllowedLoginAttempts=3 -Authenticator.MaxOldPasswordHashes=13 -Authenticator.UsernameParameterName=username -Authenticator.PasswordParameterName=password -# RememberTokenDuration (in days) -Authenticator.RememberTokenDuration=14 -# Session Timeouts (in minutes) -Authenticator.IdleTimeoutDuration=20 -Authenticator.AbsoluteTimeoutDuration=120 - -#=========================================================================== -# ESAPI Encoder -# -# ESAPI canonicalizes input before validation to prevent bypassing filters with encoded attacks. -# Failure to canonicalize input is a very common mistake when implementing validation schemes. -# Canonicalization is automatic when using the ESAPI Validator, but you can also use the -# following code to canonicalize data. -# -# ESAPI.Encoder().canonicalize( "%22hello world"" ); -# -# Multiple encoding is when a single encoding format is applied multiple times. Allowing -# multiple encoding is strongly discouraged. -Encoder.AllowMultipleEncoding=false - -# Mixed encoding is when multiple different encoding formats are applied, or when -# multiple formats are nested. Allowing multiple encoding is strongly discouraged. -Encoder.AllowMixedEncoding=false - -# The default list of codecs to apply when canonicalizing untrusted data. The list should include the codecs -# for all downstream interpreters or decoders. For example, if the data is likely to end up in a URL, HTML, or -# inside JavaScript, then the list of codecs below is appropriate. The order of the list is not terribly important. -Encoder.DefaultCodecList=HTMLEntityCodec,PercentCodec,JavaScriptCodec - - -#=========================================================================== -# ESAPI Encryption -# -# The ESAPI Encryptor provides basic cryptographic functions with a simplified API. -# To get started, generate a new key using java -classpath esapi.jar org.owasp.esapi.reference.crypto.JavaEncryptor -# There is not currently any support for key rotation, so be careful when changing your key and salt as it -# will invalidate all signed, encrypted, and hashed data. -# -# WARNING: Not all combinations of algorithms and key lengths are supported. -# If you choose to use a key length greater than 128, you MUST download the -# unlimited strength policy files and install in the lib directory of your JRE/JDK. -# See http://java.sun.com/javase/downloads/index.jsp for more information. -# -# Backward compatibility with ESAPI Java 1.4 is supported by the two deprecated API -# methods, Encryptor.encrypt(String) and Encryptor.decrypt(String). However, whenever -# possible, these methods should be avoided as they use ECB cipher mode, which in almost -# all circumstances a poor choice because of it's weakness. CBC cipher mode is the default -# for the new Encryptor encrypt / decrypt methods for ESAPI Java 2.0. In general, you -# should only use this compatibility setting if you have persistent data encrypted with -# version 1.4 and even then, you should ONLY set this compatibility mode UNTIL -# you have decrypted all of your old encrypted data and then re-encrypted it with -# ESAPI 2.0 using CBC mode. If you have some reason to mix the deprecated 1.4 mode -# with the new 2.0 methods, make sure that you use the same cipher algorithm for both -# (256-bit AES was the default for 1.4; 128-bit is the default for 2.0; see below for -# more details.) Otherwise, you will have to use the new 2.0 encrypt / decrypt methods -# where you can specify a SecretKey. (Note that if you are using the 256-bit AES, -# that requires downloading the special jurisdiction policy files mentioned above.) -# -# ***** IMPORTANT: Do NOT forget to replace these with your own values! ***** -# To calculate these values, you can run: -# java -classpath esapi.jar org.owasp.esapi.reference.crypto.JavaEncryptor -# -#Encryptor.MasterKey= -#Encryptor.MasterSalt= - -# Provides the default JCE provider that ESAPI will "prefer" for its symmetric -# encryption and hashing. (That is it will look to this provider first, but it -# will defer to other providers if the requested algorithm is not implemented -# by this provider.) If left unset, ESAPI will just use your Java VM's current -# preferred JCE provider, which is generally set in the file -# "$JAVA_HOME/jre/lib/security/java.security". -# -# The main intent of this is to allow ESAPI symmetric encryption to be -# used with a FIPS 140-2 compliant crypto-module. For details, see the section -# "Using ESAPI Symmetric Encryption with FIPS 140-2 Cryptographic Modules" in -# the ESAPI 2.0 Symmetric Encryption User Guide, at: -# http://owasp-esapi-java.googlecode.com/svn/trunk/documentation/esapi4java-core-2.0-symmetric-crypto-user-guide.html -# However, this property also allows you to easily use an alternate JCE provider -# such as "Bouncy Castle" without having to make changes to "java.security". -# See Javadoc for SecurityProviderLoader for further details. If you wish to use -# a provider that is not known to SecurityProviderLoader, you may specify the -# fully-qualified class name of the JCE provider class that implements -# java.security.Provider. If the name contains a '.', this is interpreted as -# a fully-qualified class name that implements java.security.Provider. -# -# NOTE: Setting this property has the side-effect of changing it in your application -# as well, so if you are using JCE in your application directly rather than -# through ESAPI (you wouldn't do that, would you? ;-), it will change the -# preferred JCE provider there as well. -# -# Default: Keeps the JCE provider set to whatever JVM sets it to. -Encryptor.PreferredJCEProvider= - -# AES is the most widely used and strongest encryption algorithm. This -# should agree with your Encryptor.CipherTransformation property. -# By default, ESAPI Java 1.4 uses "PBEWithMD5AndDES" and which is -# very weak. It is essentially a password-based encryption key, hashed -# with MD5 around 1K times and then encrypted with the weak DES algorithm -# (56-bits) using ECB mode and an unspecified padding (it is -# JCE provider specific, but most likely "NoPadding"). However, 2.0 uses -# "AES/CBC/PKCSPadding". If you want to change these, change them here. -# Warning: This property does not control the default reference implementation for -# ESAPI 2.0 using JavaEncryptor. Also, this property will be dropped -# in the future. -# @deprecated -Encryptor.EncryptionAlgorithm=AES -# For ESAPI Java 2.0 - New encrypt / decrypt methods use this. -Encryptor.CipherTransformation=AES/CBC/PKCS5Padding - -# Applies to ESAPI 2.0 and later only! -# Comma-separated list of cipher modes that provide *BOTH* -# confidentiality *AND* message authenticity. (NIST refers to such cipher -# modes as "combined modes" so that's what we shall call them.) If any of these -# cipher modes are used then no MAC is calculated and stored -# in the CipherText upon encryption. Likewise, if one of these -# cipher modes is used with decryption, no attempt will be made -# to validate the MAC contained in the CipherText object regardless -# of whether it contains one or not. Since the expectation is that -# these cipher modes support support message authenticity already, -# injecting a MAC in the CipherText object would be at best redundant. -# -# Note that as of JDK 1.5, the SunJCE provider does not support *any* -# of these cipher modes. Of these listed, only GCM and CCM are currently -# NIST approved. YMMV for other JCE providers. E.g., Bouncy Castle supports -# GCM and CCM with "NoPadding" mode, but not with "PKCS5Padding" or other -# padding modes. -Encryptor.cipher_modes.combined_modes=GCM,CCM,IAPM,EAX,OCB,CWC - -# Applies to ESAPI 2.0 and later only! -# Additional cipher modes allowed for ESAPI 2.0 encryption. These -# cipher modes are in _addition_ to those specified by the property -# 'Encryptor.cipher_modes.combined_modes'. -# Note: We will add support for streaming modes like CFB & OFB once -# we add support for 'specified' to the property 'Encryptor.ChooseIVMethod' -# (probably in ESAPI 2.1). -# DISCUSS: Better name? -Encryptor.cipher_modes.additional_allowed=CBC - -# 128-bit is almost always sufficient and appears to be more resistant to -# related key attacks than is 256-bit AES. Use '_' to use default key size -# for cipher algorithms (where it makes sense because the algorithm supports -# a variable key size). Key length must agree to what's provided as the -# cipher transformation, otherwise this will be ignored after logging a -# warning. -# -# NOTE: This is what applies BOTH ESAPI 1.4 and 2.0. See warning above about mixing! -Encryptor.EncryptionKeyLength=128 - -# Because 2.0 uses CBC mode by default, it requires an initialization vector (IV). -# (All cipher modes except ECB require an IV.) There are two choices: we can either -# use a fixed IV known to both parties or allow ESAPI to choose a random IV. While -# the IV does not need to be hidden from adversaries, it is important that the -# adversary not be allowed to choose it. Also, random IVs are generally much more -# secure than fixed IVs. (In fact, it is essential that feed-back cipher modes -# such as CFB and OFB use a different IV for each encryption with a given key so -# in such cases, random IVs are much preferred. By default, ESAPI 2.0 uses random -# IVs. If you wish to use 'fixed' IVs, set 'Encryptor.ChooseIVMethod=fixed' and -# uncomment the Encryptor.fixedIV. -# -# Valid values: random|fixed|specified 'specified' not yet implemented; planned for 2.1 -Encryptor.ChooseIVMethod=random -# If you choose to use a fixed IV, then you must place a fixed IV here that -# is known to all others who are sharing your secret key. The format should -# be a hex string that is the same length as the cipher block size for the -# cipher algorithm that you are using. The following is an *example* for AES -# from an AES test vector for AES-128/CBC as described in: -# NIST Special Publication 800-38A (2001 Edition) -# "Recommendation for Block Cipher Modes of Operation". -# (Note that the block size for AES is 16 bytes == 128 bits.) -# -Encryptor.fixedIV=0x000102030405060708090a0b0c0d0e0f - -# Whether or not CipherText should use a message authentication code (MAC) with it. -# This prevents an adversary from altering the IV as well as allowing a more -# fool-proof way of determining the decryption failed because of an incorrect -# key being supplied. This refers to the "separate" MAC calculated and stored -# in CipherText, not part of any MAC that is calculated as a result of a -# "combined mode" cipher mode. -# -# If you are using ESAPI with a FIPS 140-2 cryptographic module, you *must* also -# set this property to false. -Encryptor.CipherText.useMAC=true - -# Whether or not the PlainText object may be overwritten and then marked -# eligible for garbage collection. If not set, this is still treated as 'true'. -Encryptor.PlainText.overwrite=true - -# Do not use DES except in a legacy situations. 56-bit is way too small key size. -#Encryptor.EncryptionKeyLength=56 -#Encryptor.EncryptionAlgorithm=DES - -# TripleDES is considered strong enough for most purposes. -# Note: There is also a 112-bit version of DESede. Using the 168-bit version -# requires downloading the special jurisdiction policy from Sun. -#Encryptor.EncryptionKeyLength=168 -#Encryptor.EncryptionAlgorithm=DESede - -Encryptor.HashAlgorithm=SHA-512 -Encryptor.HashIterations=1024 -Encryptor.DigitalSignatureAlgorithm=SHA1withDSA -Encryptor.DigitalSignatureKeyLength=1024 -Encryptor.RandomAlgorithm=SHA1PRNG -Encryptor.CharacterEncoding=UTF-8 - -# This is the Pseudo Random Function (PRF) that ESAPI's Key Derivation Function -# (KDF) normally uses. Note this is *only* the PRF used for ESAPI's KDF and -# *not* what is used for ESAPI's MAC. (Currently, HmacSHA1 is always used for -# the MAC, mostly to keep the overall size at a minimum.) -# -# Currently supported choices for JDK 1.5 and 1.6 are: -# HmacSHA1 (160 bits), HmacSHA256 (256 bits), HmacSHA384 (384 bits), and -# HmacSHA512 (512 bits). -# Note that HmacMD5 is *not* supported for the PRF used by the KDF even though -# the JDKs support it. See the ESAPI 2.0 Symmetric Encryption User Guide -# further details. -Encryptor.KDF.PRF=HmacSHA256 -#=========================================================================== -# ESAPI HttpUtilties -# -# The HttpUtilities provide basic protections to HTTP requests and responses. Primarily these methods -# protect against malicious data from attackers, such as unprintable characters, escaped characters, -# and other simple attacks. The HttpUtilities also provides utility methods for dealing with cookies, -# headers, and CSRF tokens. -# -# Default file upload location (remember to escape backslashes with \\) -# HttpUtilities.UploadDir=C:\\ESAPI\\testUpload -# HttpUtilities.UploadTempDir=C:\\temp -# Force flags on cookies, if you use HttpUtilities to set cookies -HttpUtilities.ForceHttpOnlySession=false -HttpUtilities.ForceSecureSession=false -HttpUtilities.ForceHttpOnlyCookies=true -HttpUtilities.ForceSecureCookies=true -# Maximum size of HTTP headers -HttpUtilities.MaxHeaderSize=4096 -# File upload configuration -HttpUtilities.ApprovedUploadExtensions=.zip,.pdf,.doc,.docx,.ppt,.pptx,.tar,.gz,.tgz,.rar,.war,.jar,.ear,.xls,.rtf,.properties,.java,.class,.txt,.xml,.jsp,.jsf,.exe,.dll -HttpUtilities.MaxUploadFileBytes=500000000 -# Using UTF-8 throughout your stack is highly recommended. That includes your database driver, -# container, and any other technologies you may be using. Failure to do this may expose you -# to Unicode transcoding injection attacks. Use of UTF-8 does not hinder internationalization. -HttpUtilities.ResponseContentType=text/html; charset=UTF-8 -# This is the name of the cookie used to represent the HTTP session -# Typically this will be the default "JSESSIONID" -HttpUtilities.HttpSessionIdName=JSESSIONID - - - -#=========================================================================== -# ESAPI Executor -# CHECKME - This should be made OS independent. Don't use unsafe defaults. -# # Examples only -- do NOT blindly copy! -# For Windows: -# Executor.WorkingDirectory=C:\\Windows\\Temp -# Executor.ApprovedExecutables=C:\\Windows\\System32\\cmd.exe,C:\\Windows\\System32\\runas.exe -# For *nux, MacOS: -# Executor.WorkingDirectory=/tmp -# Executor.ApprovedExecutables=/bin/bash -Executor.WorkingDirectory= -Executor.ApprovedExecutables= - - -#=========================================================================== -# ESAPI Logging -# Set the application name if these logs are combined with other applications -Logger.ApplicationName=DPT -# If you use an HTML log viewer that does not properly HTML escape log data, you can set LogEncodingRequired to true -Logger.LogEncodingRequired=false -# Determines whether ESAPI should log the application name. This might be clutter in some single-server/single-app environments. -Logger.LogApplicationName=true -# Determines whether ESAPI should log the server IP and port. This might be clutter in some single-server environments. -Logger.LogServerIP=true -# Determines whether ESAPI should log the user info. -Logger.UserInfo=true -# Determines whether ESAPI should log the session id and client IP. -Logger.ClientInfo=true - - -#=========================================================================== -# ESAPI Intrusion Detection -# -# Each event has a base to which .count, .interval, and .action are added -# The IntrusionException will fire if we receive "count" events within "interval" seconds -# The IntrusionDetector is configurable to take the following actions: log, logout, and disable -# (multiple actions separated by commas are allowed e.g. event.test.actions=log,disable -# -# Custom Events -# Names must start with "event." as the base -# Use IntrusionDetector.addEvent( "test" ) in your code to trigger "event.test" here -# You can also disable intrusion detection completely by changing -# the following parameter to true -# -IntrusionDetector.Disable=false -# -IntrusionDetector.event.test.count=2 -IntrusionDetector.event.test.interval=10 -IntrusionDetector.event.test.actions=disable,log - -# Exception Events -# All EnterpriseSecurityExceptions are registered automatically -# Call IntrusionDetector.getInstance().addException(e) for Exceptions that do not extend EnterpriseSecurityException -# Use the fully qualified classname of the exception as the base - -# any intrusion is an attack -IntrusionDetector.org.owasp.esapi.errors.IntrusionException.count=1 -IntrusionDetector.org.owasp.esapi.errors.IntrusionException.interval=1 -IntrusionDetector.org.owasp.esapi.errors.IntrusionException.actions=log,disable,logout - -# for test purposes -# CHECKME: Shouldn't there be something in the property name itself that designates -# that these are for testing??? -IntrusionDetector.org.owasp.esapi.errors.IntegrityException.count=10 -IntrusionDetector.org.owasp.esapi.errors.IntegrityException.interval=5 -IntrusionDetector.org.owasp.esapi.errors.IntegrityException.actions=log,disable,logout - -# rapid validation errors indicate scans or attacks in progress -# org.owasp.esapi.errors.ValidationException.count=10 -# org.owasp.esapi.errors.ValidationException.interval=10 -# org.owasp.esapi.errors.ValidationException.actions=log,logout - -# sessions jumping between hosts indicates session hijacking -IntrusionDetector.org.owasp.esapi.errors.AuthenticationHostException.count=2 -IntrusionDetector.org.owasp.esapi.errors.AuthenticationHostException.interval=10 -IntrusionDetector.org.owasp.esapi.errors.AuthenticationHostException.actions=log,logout - - -#=========================================================================== -# ESAPI Validation -# -# The ESAPI Validator works on regular expressions with defined names. You can define names -# either here, or you may define application specific patterns in a separate file defined below. -# This allows enterprises to specify both organizational standards as well as application specific -# validation rules. -# -Validator.ConfigurationFile=validation.properties - -# Validators used by ESAPI -Validator.AccountName=^[a-zA-Z0-9]{3,20}$ -Validator.SystemCommand=^[a-zA-Z\\-\\/]{1,64}$ -Validator.RoleName=^[a-z]{1,20}$ - -#the word TEST below should be changed to your application -#name - only relative URL's are supported -Validator.Redirect=^\\/test.*$ - -# Global HTTP Validation Rules -# Values with Base64 encoded data (e.g. encrypted state) will need at least [a-zA-Z0-9\/+=] -Validator.HTTPScheme=^(http|https)$ -Validator.HTTPServerName=^[a-zA-Z0-9_.\\-]*$ -Validator.HTTPParameterName=^[a-zA-Z0-9_]{1,32}$ -Validator.HTTPParameterValue=^[a-zA-Z0-9.\\-\\/+=@_,:\\\\ ]*$ -Validator.HTTPParameterTransactionValue=^[a-zA-Z0-9.\\-\\/+=@_<>:\\"\\-, ]*$ -Validator.HTTPCookieName=^[a-zA-Z0-9\\-_]{1,32}$ -Validator.HTTPCookieValue=^[a-zA-Z0-9\\-\\/+=_ ]*$ -Validator.HTTPHeaderName=^[a-zA-Z0-9\\-_]{1,32}$ -Validator.HTTPHeaderValue=^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ ]*$ -Validator.HTTPContextPath=^\\/?[a-zA-Z0-9.\\-\\/_]*$ -Validator.HTTPServletPath=^[a-zA-Z0-9.\\-\\/_]*$ -Validator.HTTPPath=^[a-zA-Z0-9.\\-_]*$ -Validator.HTTPQueryString=^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ %]*$ -Validator.HTTPURI=^[a-zA-Z0-9()\\-=\\*\\.\\?;,+\\/:&_ ]*$ -Validator.HTTPURL=^.*$ -Validator.HTTPJSESSIONID=^[A-Z0-9]{10,30}$ -Validator.SafeString=^[\\.\\p{Alnum}\\p{Space}_\\-]{0,1024}$ -Validator.Email=^[A-Za-z0-9._%'\\-+]+@[A-Za-z0-9.-]+\\.[a-zA-Z]{2,4}$ -Validator.IPAddress=^(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$ - -# Validation of file related input -Validator.FileName=^[a-zA-Z0-9!@#$%^&{}\\[\\]()_+\\-=,.~'` ]{1,255}$ -Validator.DirectoryName=^[a-zA-Z0-9:/\\\\!@#$%^&{}\\[\\]()_+\\-=,.~'` ]{1,255}$ - -# Validation of dates. Controls whether or not 'lenient' dates are accepted. -# See DataFormat.setLenient(boolean flag) for further details. -Validator.AcceptLenientDates=false diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/classes/application.properties b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/classes/application.properties deleted file mode 100644 index b59217d5a4..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/classes/application.properties +++ /dev/null @@ -1,2 +0,0 @@ -requestDebuggingActivated=1 -spring.main.allow-bean-definition-overriding=true diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/classes/log4j2.xml b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/classes/log4j2.xml deleted file mode 100644 index fe37cbdce6..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/classes/log4j2.xml +++ /dev/null @@ -1,40 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<Configuration status="warn" name="MyApp" packages=""> - <Appenders> - <Console name="Console" target="SYSTEM_OUT"> - <PatternLayout pattern="%d{HH:mm:ss.SSS} [%t] %-5level %logger{36} - %msg%n"/> - </Console> - <RollingFile name="RollingFile" fileName="axis2-json-api.log" - filePattern="axis2-json-api-%d{MM-dd-yyyy}-%i.log"> - <PatternLayout> - <Pattern>%d %p %c{1.} [%t] %m%n</Pattern> - </PatternLayout> - <Policies> - <TimeBasedTriggeringPolicy /> - <SizeBasedTriggeringPolicy size="20 MB"/> - </Policies> - <DefaultRolloverStrategy max="20"/> - </RollingFile> - </Appenders> - <Loggers> - <Logger name="userguide.springboot" level="debug" additivity="false" > - <AppenderRef ref="RollingFile"/> - <AppenderRef ref="Console"/> - </Logger> - <Logger name="org.apache" level="warn" additivity="false" > - <AppenderRef ref="RollingFile"/> - <AppenderRef ref="Console"/> - </Logger> - <Logger name="org.apache.axis2" level="warn" additivity="false" > - <AppenderRef ref="RollingFile"/> - <AppenderRef ref="Console"/> - </Logger> - <Logger name="org.springframework" level="warn" additivity="false" > - <AppenderRef ref="RollingFile"/> - <AppenderRef ref="Console"/> - </Logger> - <Root level="debug"> - <AppenderRef ref="RollingFile"/> - </Root> - </Loggers> -</Configuration> diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/conf/axis2.xml b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/conf/axis2.xml deleted file mode 100644 index 943d74bbeb..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/conf/axis2.xml +++ /dev/null @@ -1,352 +0,0 @@ -<!-- - ~ Licensed to the Apache Software Foundation (ASF) under one - ~ or more contributor license agreements. See the NOTICE file - ~ distributed with this work for additional information - ~ regarding copyright ownership. The ASF licenses this file - ~ to you under the Apache License, Version 2.0 (the - ~ "License"); you may not use this file except in compliance - ~ with the License. You may obtain a copy of the License at - ~ - ~ http://www.apache.org/licenses/LICENSE-2.0 - ~ - ~ Unless required by applicable law or agreed to in writing, - ~ software distributed under the License is distributed on an - ~ "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY - ~ KIND, either express or implied. See the License for the - ~ specific language governing permissions and limitations - ~ under the License. - --> - -<axisconfig name="AxisJava2.0"> - <!-- ================================================= --> - <!-- Parameters --> - <!-- ================================================= --> - <parameter name="hotdeployment">true</parameter> - <parameter name="hotupdate">false</parameter> - <parameter name="enableMTOM">false</parameter> - <parameter name="enableSwA">false</parameter> - <parameter name="enableJSONOnly">true</parameter> - - <!--Uncomment if you want to enable file caching for attachments --> - <!--parameter name="cacheAttachments">true</parameter> - <parameter name="attachmentDIR"></parameter> - <parameter name="sizeThreshold">4000</parameter--> - - <parameter name="EnableChildFirstClassLoading">false</parameter> - - <!-- - The exposeServiceMetadata parameter decides whether the metadata (WSDL, schema, policy) of - the services deployed on Axis2 should be visible when ?wsdl, ?wsdl2, ?xsd, ?policy requests - are received. - This parameter can be defined in the axi2.xml file, in which case this will be applicable - globally, or in the services.xml files, in which case, it will be applicable to the - Service groups and/or services, depending on the level at which the parameter is declared. - This value of this parameter defaults to true. - --> - <parameter name="exposeServiceMetadata">true</parameter> - - - <!--Uncomment if you want to plugin your own attachments lifecycle implementation --> - <!--<attachmentsLifecycleManager class="org.apache.axiom.attachments.lifecycle.impl.LifecycleManagerImpl"/>--> - - - <!--Uncomment if you want to enable the reduction of the in-memory cache of WSDL definitions --> - <!--In some server environments, the available memory heap is limited and can fill up under load --> - <!--Since in-memory copies of WSDL definitions can be large, some steps can be taken--> - <!--to reduce the memory needed for the cached WSDL definitions. --> - <!--parameter name="reduceWSDLMemoryCache">true</parameter--> - - <!--This will give out the timout of the configuration contexts, in milliseconds--> - <parameter name="ConfigContextTimeoutInterval">30000</parameter> - - <!--During a fault, stack trace can be sent with the fault message. The following flag will control --> - <!--that behavior.--> - <parameter name="sendStacktraceDetailsWithFaults">false</parameter> - - <!--If there aren't any information available to find out the fault reason, we set the message of the exception--> - <!--as the faultreason/Reason. But when a fault is thrown from a service or some where, it will be --> - <!--wrapped by different levels. Due to this the initial exception message can be lost. If this flag--> - <!--is set, then Axis2 tries to get the first exception and set its message as the faultreason/Reason.--> - <parameter name="DrillDownToRootCauseForFaultReason">false</parameter> - - <parameter name="userName"></parameter> - <parameter name="password"></parameter> - - <!--To override repository/services you need to uncomment following parameter and value SHOULD be absolute file path.--> - <!--ServicesDirectory only works on the following cases--> - <!---File based configurator and in that case the value should be a file URL (http:// not allowed)--> - <!---When creating URL Based configurator with URL file:// --> - <!--- War based configurator with expanded case , --> - - <!--All the other scenarios it will be ignored.--> - <!--<parameter name="ServicesDirectory">service</parameter>--> - <!--To override repository/modules you need to uncomment following parameter and value SHOULD be absolute file path--> - <!--<parameter name="ModulesDirectory">modules</parameter>--> - - - <!--Following params will set the proper context paths for invocations. All the endpoints will have a commons context--> - <!--root which can configured using the following contextRoot parameter--> - <!--<parameter name="contextRoot">axis2</parameter>--> - - <!--Our HTTP endpoints can handle both REST and SOAP. Following parameters can be used to distinguiush those endpoints--> - <!--In case of a servlet, if you change this you have to manually change the settings of your servlet container to map this --> - <!--context path to proper Axis2 servlets--> - <!--<parameter name="servicePath">services</parameter>--> - <!--<parameter name="restPath">rest</parameter>--> - - <!-- Following parameter will completely disable REST handling in Axis2--> - <parameter name="disableREST" locked="false">false</parameter> - - <!-- Following parameter will suppress generation of SOAP 1.2 bindings in auto-generated WSDL files --> - <parameter name="disableSOAP12" locked="true">false</parameter> - - <!-- ================================================= --> - <!-- Deployers --> - <!-- ================================================= --> - - <!--Service deployer , this will alow users to deploy AAR or exploded AAR as axis2 services--> - <deployer extension=".aar" directory="services" class="org.apache.axis2.deployment.ServiceDeployer"> - <serviceBuilderExtension name ="jwsbuilderExt" class="org.apache.axis2.jaxws.framework.JAXWSServiceBuilderExtension"/> - <serviceBuilderExtension name ="wsdlbuilderExt" class="org.apache.axis2.deployment.WSDLServiceBuilderExtension"/> - </deployer> - - <!--POJO deployer , this will alow users to drop .class file and make that into a service--> - <deployer extension=".class" directory="pojo" class="org.apache.axis2.deployment.POJODeployer"/> - <deployer extension=".jar" directory="transports" - class="org.apache.axis2.deployment.TransportDeployer"/> - - <!--CORBA deployer , this will alow users to invoke remote CORBA services through Axis2--> - <!--<deployer extension=".xml" directory="corba" class="org.apache.axis2.corba.deployer.CorbaDeployer"/>--> - - <!--<deployer extension=".jsa" directory="rmiservices" class="org.apache.axis2.rmi.deploy.RMIServiceDeployer"/>--> - - - <!-- Following parameter will set the host name for the epr--> - <!--<parameter name="hostname" locked="true">myhost.com</parameter>--> - - <!-- If you have a front end host which exposes this webservice using a different public URL --> - <!-- use this parameter to override autodetected url --> - <!--<parameter name="httpFrontendHostUrl">https://someotherhost/context</parameter>--> - - <!--By default, JAXWS services are created by reading annotations. WSDL and schema are generated--> - <!--using a separate WSDL generator only when ?wsdl is called. Therefore, even if you engage--> - <!--policies etc.. to AxisService, it doesn't appear in the WSDL. By setting the following property--> - <!--to true, you can create the AxisService using the generated WSDL and remove the need for a--> - <!--WSDL generator. When ?wsdl is called, WSDL is generated in the normal way.--> - <parameter name="useGeneratedWSDLinJAXWS">false</parameter> - - <!-- The way of adding listener to the system--> - <!-- <listener class="org.apache.axis2.ObserverIMPL">--> - <!-- <parameter name="RSS_URL">http://127.0.0.1/rss</parameter>--> - <!-- </listener>--> - - <threadContextMigrators> - <threadContextMigrator listId="JAXWS-ThreadContextMigrator-List" - class="org.apache.axis2.jaxws.addressing.migrator.EndpointContextMapMigrator"/> - </threadContextMigrators> - - <!-- ================================================= --> - <!-- Message Receivers --> - <!-- ================================================= --> - <!--This is the default MessageReceiver for the system , if you want to have MessageReceivers for --> - <!--all the other MEP implement it and add the correct entry to here , so that you can refer from--> - <!--any operation --> - <!--Note : You can override this for a particular service by adding the same element with your requirement--> - <messageReceivers> - <messageReceiver mep="http://www.w3.org/ns/wsdl/in-out"; - class="org.apache.axis2.json.moshi.rpc.JsonRpcMessageReceiver" /> - <messageReceiver mep="http://www.w3.org/ns/wsdl/in-only"; - class="org.apache.axis2.json.moshi.rpc.JsonInOnlyRPCMessageReceiver"/> - </messageReceivers> - - <!-- ================================================= --> - <!-- Message Formatter --> - <!-- ================================================= --> - <!--Following content type to message formatter mapping can be used to implement support for different message --> - <!--format serialization in Axis2. These message formats are expected to be resolved based on the content type. --> - <messageFormatters> - <messageFormatter contentType="application/x-www-form-urlencoded" - class="org.apache.axis2.kernel.http.XFormURLEncodedFormatter"/> - <messageFormatter contentType="multipart/form-data" - class="org.apache.axis2.kernel.http.MultipartFormDataFormatter"/> - <messageFormatter contentType="application/xml" - class="org.apache.axis2.kernel.http.ApplicationXMLFormatter"/> - <messageFormatter contentType="text/xml" - class="org.apache.axis2.kernel.http.SOAPMessageFormatter"/> - <messageFormatter contentType="application/soap+xml" - class="org.apache.axis2.kernel.http.SOAPMessageFormatter"/> - <!-- FieldFilteringMessageFormatter wraps MoshiStreamingMessageFormatter: - - Streams response in 64KB chunks (FlushingOutputStream) for HTTP/2 - - Supports ?fields=a,b,c query parameter for response field selection - - Zero overhead when no fields parameter is present - See: json-streaming-formatter.html --> - <messageFormatter contentType="application/json" - class="org.apache.axis2.json.streaming.FieldFilteringMessageFormatter"/> - </messageFormatters> - - <!-- ================================================= --> - <!-- Message Builders --> - <!-- ================================================= --> - <!--Following content type to builder mapping can be used to implement support for different message --> - <!--formats in Axis2. These message formats are expected to be resolved based on the content type. --> - <messageBuilders> - <messageBuilder contentType="application/xml" - class="org.apache.axis2.builder.ApplicationXMLBuilder"/> - <messageBuilder contentType="application/x-www-form-urlencoded" - class="org.apache.axis2.builder.XFormURLEncodedBuilder"/> - <messageBuilder contentType="multipart/form-data" - class="org.apache.axis2.builder.MultipartFormDataBuilder"/> - <messageBuilder contentType="application/json" - class="org.apache.axis2.json.moshi.JsonBuilder"/> - </messageBuilders> - - <!-- ================================================= --> - <!-- Transport Ins --> - <!-- ================================================= --> - <transportReceiver name="http" class="org.apache.axis2.transport.http.AxisServletListener"> - <parameter name="port">8080</parameter> - </transportReceiver> - - <transportReceiver name="https" class="org.apache.axis2.transport.http.AxisServletListener"> - <parameter name="port">8443</parameter> - </transportReceiver> - - <!-- This is where you'd put custom transports. See the transports project --> - <!-- for more. http://ws.apache.org/commons/transport --> - - <!-- ================================================= --> - <!-- Transport Outs --> - <!-- ================================================= --> - - <transportSender name="local" - class="org.apache.axis2.transport.local.LocalTransportSender"/> - <transportSender name="http" - class="org.apache.axis2.transport.http.impl.httpclient5.HTTPClient5TransportSender"> - <parameter name="PROTOCOL">HTTP/1.1</parameter> - <parameter name="Transfer-Encoding">chunked</parameter> - - <!-- If following is set to 'true', optional action part of the Content-Type will not be added to the SOAP 1.2 messages --> - <!-- <parameter name="OmitSOAP12Action">true</parameter> --> - </transportSender> - - <transportSender name="https" - class="org.apache.axis2.transport.http.impl.httpclient5.HTTPClient5TransportSender"> - <parameter name="PROTOCOL">HTTP/1.1</parameter> - <parameter name="Transfer-Encoding">chunked</parameter> - </transportSender> - - <!-- HTTP/2 Transport for Enterprise Big Data Processing --> - <transportSender name="h2" - class="org.apache.axis2.transport.h2.impl.httpclient5.H2TransportSender"> - <parameter name="PROTOCOL">HTTP/2.0</parameter> - <parameter name="maxConcurrentStreams">100</parameter> - <parameter name="initialWindowSize">65536</parameter> - <parameter name="serverPushEnabled">false</parameter> - <parameter name="connectionTimeout">30000</parameter> - <parameter name="responseTimeout">300000</parameter> - <parameter name="streamingBufferSize">65536</parameter> - <parameter name="memoryPressureThreshold">0.8</parameter> - <!-- Enterprise Big Data Configuration --> - <parameter name="enableStreamingOptimization">true</parameter> - <parameter name="enableMemoryOptimization">true</parameter> - <parameter name="largePayloadThreshold">52428800</parameter> <!-- 50MB --> - </transportSender> - - <!-- Please enable this if you need the java transport --> - <!-- <transportSender name="java" - class="org.apache.axis2.transport.java.JavaTransportSender"/> --> - - <!-- ================================================= --> - <!-- Global Modules --> - <!-- ================================================= --> - <!-- Comment this to disable Addressing --> - <!-- commented out for the Axis2 spring boot demo that uses JSON --> - <!-- <module ref="addressing"/> --> - - <!-- OpenAPI/Swagger documentation module --> - <module ref="openapi"/> - - <!--Configuring module , providing parameters for modules whether they refer or not--> - <!--<moduleConfig name="addressing">--> - <!--<parameter name="addressingPara">N/A</parameter>--> - <!--</moduleConfig>--> - - - <!-- ================================================= --> - <!-- Phases --> - <!-- ================================================= --> - <phaseOrder type="InFlow"> - <!-- System predefined phases --> - <phase name="Transport"> - <handler name="RequestURIBasedDispatcher" - class="org.apache.axis2.dispatchers.RequestURIBasedDispatcher"> - <order phase="Transport"/> - </handler> - <handler name="SOAPActionBasedDispatcher" - class="org.apache.axis2.dispatchers.SOAPActionBasedDispatcher"> - <order phase="Transport"/> - </handler> - <handler name="JSONMessageHandler" - class="org.apache.axis2.json.moshi.JSONMessageHandler"> - <order phase="Transport"/> - </handler> - </phase> - <phase name="Addressing"> - <handler name="AddressingBasedDispatcher" - class="org.apache.axis2.dispatchers.AddressingBasedDispatcher"> - <order phase="Addressing"/> - </handler> - </phase> - <phase name="Security"/> - <phase name="PreDispatch"/> - <phase name="Dispatch" class="org.apache.axis2.engine.DispatchPhase"> - <handler name="JSONBasedDefaultDispatcher" - class="org.apache.axis2.dispatchers.JSONBasedDefaultDispatcher"/> - </phase> - <phase name="RMPhase"/> - <!-- System predefined phases --> - <!-- After Postdispatch phase module author or service author can add any phase he want --> - <phase name="OperationInPhase"> - <handler name="MustUnderstandChecker" - class="org.apache.axis2.jaxws.dispatchers.MustUnderstandChecker"> - <order phase="OperationInPhase"/> - </handler> - </phase> - </phaseOrder> - <phaseOrder type="OutFlow"> - <!-- user can add his own phases to this area --> - <phase name="OperationOutPhase"/> - <!--system predefined phase--> - <!--these phase will run irrespective of the service--> - <phase name="RMPhase"/> - <phase name="PolicyDetermination"/> - <phase name="MessageOut"/> - <phase name="Security"/> - </phaseOrder> - <phaseOrder type="InFaultFlow"> - <phase name="Addressing"> - <handler name="AddressingBasedDispatcher" - class="org.apache.axis2.dispatchers.AddressingBasedDispatcher"> - <order phase="Addressing"/> - </handler> - </phase> - <phase name="Security"/> - <phase name="PreDispatch"/> - <phase name="Dispatch" class="org.apache.axis2.engine.DispatchPhase"> - <handler name="JSONBasedDefaultDispatcher" - class="org.apache.axis2.dispatchers.JSONBasedDefaultDispatcher"/> - </phase> - <phase name="RMPhase"/> - <!-- user can add his own phases to this area --> - <phase name="OperationInFaultPhase"/> - </phaseOrder> - <phaseOrder type="OutFaultFlow"> - <!-- user can add his own phases to this area --> - <phase name="OperationOutFaultPhase"/> - <phase name="RMPhase"/> - <phase name="PolicyDetermination"/> - <phase name="MessageOut"/> - <phase name="Security"/> - </phaseOrder> -</axisconfig> - diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/jboss-deployment-structure.xml b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/jboss-deployment-structure.xml deleted file mode 100644 index 8b3fa8c862..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/jboss-deployment-structure.xml +++ /dev/null @@ -1,10 +0,0 @@ -<jboss-deployment-structure> - <deployment> - <exclusions><module name="org.apache.logging.log4j.api" /></exclusions> - <dependencies> - <system export="true"><paths><path name="org/w3c/dom/css"/></paths></system> - <module name="org.bouncycastle" slot="main" export="true" /> - <module name="jdk.unsupported" /><module name="jdk.net" /> - </dependencies> - </deployment> -</jboss-deployment-structure> diff --git a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/jboss-web.xml b/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/jboss-web.xml deleted file mode 100644 index 6cfdbc376d..0000000000 --- a/modules/samples/userguide/src/userguide/springbootdemo-tomcat11/WEB-INF/jboss-web.xml +++ /dev/null @@ -1,2 +0,0 @@ -<?xml version="1.0" encoding="UTF-8"?> -<jboss-web xmlns="urn:jboss:jakartaee:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xsi:schemaLocation="urn:jboss:jakartaee:1.0 https://www.jboss.org/schema/jbossas/jboss-web_15_1.xsd"; version="15.1"></jboss-web>
