Hi Axon.ivy team,

In our project, we supports Token-based authentication/authorization using JAX-RS Feature. That means we do not use Basic authentication for RESTful API.

When we attempted to upgrade our project into Axon.ivy Engine 7.0.12 LTS, we discovered that after a couple of RESTful requests, we got License issue (run out of sessions). After investigation, we concluded that the ApplicationSessionRequestFilter had spawn new session on every request and never destroy them. This was because the class ApplicationSessionResponseFilter no longer existed.

We are not sure whether we are the only one who gets this issue? But this is a critical issue we have right now.

UPDATE 12.6.2019:

We were able to verify this issue today by trying to extend the JAX-RS Extension patch to include again the ApplicationSessionResponseFilter into the RestResourceConfig. The issue was resolved from our side (no more License Exceeded exception).

However, we cannot use our own patch in productive environment. We would like to ask for Axon.ivy team whether how this issue will be addressed? I would be REALLY nice if the Axon.ivy Team can provide a new patch fixing both issues.

Thanks for support!

Jack

asked 11.06 at 05:06

vagabond's gravatar image

vagabond
61137
accept rate: 50%

edited 12.06 at 08:32

sounds to me like the backport of the async REST features is causing this issue:

  • XIVY-3119 Allow sync and async REST Service Calls from Browser owning authenticated Ivy Session
  • XIVY-3000 Support async REST services

...but let's wait until support can verify that this is a general which is issue reproducible in any environment.

(11.06 at 05:32) Reguel Werme... ♦♦ Reguel%20Wermelinger's gravatar image

Hi @reguel wermelinger, please check my update. Is there any update from your side?

(12.06 at 08:33) vagabond vagabond's gravatar image

Please have a look at: https://answers.axonivy.com/questions/2462/is-it-possible-to-access-ivy-s-restful-api-from-an-htmldialog-or-within-the-same-session Try setting the java system properties to reuse the sessions. This behaviour is normally disabled on 7.0.x to keep the old behaviour where it would spawn a new session every time.

(17.06 at 03:48) SupportIvyTeam ♦♦ SupportIvyTeam's gravatar image
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×25
×14

Asked: 11.06 at 05:06

Seen: 65 times

Last updated: 17.06 at 03:48