BaseX：沒有驗證的公共REST API

Question

是否有可能在BaseX中創建一個公共REST API，以便客戶端根本不需要驗證？

此公共API應該是隻讀的。我已經完成的工作是創建一個名爲HTTPGuest的用戶，該用戶可以讀取某些數據庫。

然後我試了basexhttp -UHTTPGuest。但API仍然希望通過基本認證獲得憑證。

Answer 1

您可以通過修改web.xml文件，它通常位於~/BaseXWeb/WEB-INF/web.xml提供默認憑據。該文件包含以下塊>

<!-- REST Service (can be deactivated by removing this entry) --> 
    <servlet> 
    <servlet-name>REST</servlet-name> 
    <servlet-class>org.basex.http.rest.RESTServlet</servlet-class> 
    <!-- service-specific credentials 
    <init-param> 
     <param-name>org.basex.user</param-name> 
     <param-value/> 
    </init-param> 
    <init-param> 
     <param-name>org.basex.password</param-name> 
     <param-value/> 
    </init-param> 
    --> 
    </servlet> 
    <servlet-mapping> 
    <servlet-name>REST</servlet-name> 
    <url-pattern>/rest/*</url-pattern> 
    </servlet-mapping> 

這裏，取消對<init-param/>子樹和用戶/密碼組合添加到<param-value/>元素，例如

<!-- REST Service (can be deactivated by removing this entry) --> 
    <servlet> 
    <servlet-name>REST</servlet-name> 
    <servlet-class>org.basex.http.rest.RESTServlet</servlet-class> 
    <init-param> 
     <param-name>org.basex.user</param-name> 
     <param-value>HTTPGuest</param-value> 
    </init-param> 
    <init-param> 
     <param-name>org.basex.password</param-name> 
     <param-value>super-secret-passphrase</param-value> 
    </init-param> 
    </servlet> 
    <servlet-mapping> 
    <servlet-name>REST</servlet-name> 
    <url-pattern>/rest/*</url-pattern> 
    </servlet-mapping>