1 Reply Latest reply on May 3, 2013 7:38 AM by Martin Gustafsson

    Disable wsdl publication

    Martin Gustafsson Newbie



      Is it possible to disable the automatic wsdl publication for a web service? In other words, I don't want clients to be able to fetch it using "http://server.com/services/someservice?wsdl".


      I'm using JBoss EAP 6.0.




        • 1. Re: Disable wsdl publication
          Martin Gustafsson Newbie

          It's possible to use JBossWeb's RewriteValve to have JBossWeb intercept WSDL requests and return an HTTP 403 forbidden response before the request is passed on to JBossWS.

          An example rewrite valve's rewrite pattern to disable access to "?wsdl" pages by providing a 403 forbidden access response:


          <subsystem xmlns="urn:jboss:domain:web:1.2" default-virtual-server="default-host" native="false">
              <connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http"/>
              <virtual-server name="default-host" enable-welcome-root="true">
                  <alias name="localhost"/>
                  <alias name="example.com"/>
                  <rewrite pattern="(.*)" substitution="-" flags="F">
                       <condition test="%{QUERY_STRING}" pattern="wsdl" flags="OR"/>


          1 of 1 people found this helpful