-
Enhancement
-
Resolution: Done
-
Critical
-
None
-
None
-
None
-
Documentation (Ref Guide, User Guide, etc.)
Now that Jackson 2.10 is used, we need to enable polymorphic type validators by default (to deal with the case of Default Typing being enabled through `@JsonTypeInfo` annotated classes).
To do that we most likely need to:
1) create a custom extension of `BasicPolymorphicTypeValidator` that register a white-list of FQCNs obtained through a system property (or through MP Config if available)
2) set such validator in the ObjectMapper instances we create in the resteasy providers (`mapper.setPolymorphicTypeValidator(...)`)
3) create a testcase verifying this
4) provide additional documentation (about the property for white-list specification)
Some references:
- causes
-
RESTEASY-2469 ResteasyJackson2Provider erases existing PolymorphicTypeValidator
- Resolved
- relates to
-
RESTEASY-3055 RESTEasy can't deserialize subtypes (JSON)
- Closed
-
RESTEASY-2368 Upgrade Jackson2 to 2.10.0
- Resolved
-
RESTEASY-2412 Upgrade Jackson2 to 2.10.1
- Resolved
-
RESTEASY-2423 Support "*" value in Jackson white-list based PolymorphicTypeValidator extension
- Resolved