[CXF-8752] Configurable list of redirectable verbs

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.5.3, 3.4.8
• Fix Version/s: 3.5.4, 3.4.9, 4.0.0, 3.6.0
• Estimated Complexity: Unknown
• Assignee: Unassigned
• Reporter: Yves Piel
• Created: 18/Aug/22 08:58
• Updated: 18/Sep/23 18:48
• Resolved: 30/Aug/22 01:14

Description

Currently, redirections are limited to 'verbs with no content':

• List of verbs with no content
• Limitation for redirections

In HTTP/1.1 specification it is written that automatic redirection need to be done with care for methods not known to be safe:

The safe methods are GET, HEAD, OPTIONS, and TRACE, those listed in list of verbs with no content .

Although the specification tells to do redirection of not safe method with care, it doesn't forbid it. Currently, it is not possible to do redirection of a POST method with CXF.

 

Maybe it could be acceptable to configure the list of redirected verbs ?

Issue Links

• links to: GitHub Pull Request #987