Disable wsdl publication

[emartgu]

Hi,

Is it possible to disable the automatic wsdl publication for a web service? In other words, I don't want clients to be able to fetch it using "http://server.com/services/someservice?wsdl".

I'm using JBoss EAP 6.0.

Thanks,

Martin

[emartgu]

It's possible to use JBossWeb's RewriteValve to have JBossWeb intercept WSDL requests and return an HTTP 403 forbidden response before the request is passed on to JBossWS.

An example rewrite valve's rewrite pattern to disable access to "?wsdl" pages by providing a 403 forbidden access response:

<subsystem xmlns="urn:jboss:domain:web:1.2" default-virtual-server="default-host" native="false">
    <connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http"/>
    <virtual-server name="default-host" enable-welcome-root="true">
        <alias name="localhost"/>
        <alias name="example.com"/>
        <rewrite pattern="(.*)" substitution="-" flags="F">
             <condition test="%{QUERY_STRING}" pattern="wsdl" flags="OR"/>

        </rewrite>
    </virtual-server>
</subsystem>