/* * Copyright 2002-2017 the original author or authors. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.springframework.web.accept; import java.util.ArrayList; import java.util.HashMap; import java.util.List; import java.util.Locale; import java.util.Map; import java.util.Map.Entry; import java.util.Properties; import javax.servlet.ServletContext; import org.springframework.beans.factory.FactoryBean; import org.springframework.beans.factory.InitializingBean; import org.springframework.http.MediaType; import org.springframework.http.MediaTypeFactory; import org.springframework.util.Assert; import org.springframework.util.CollectionUtils; import org.springframework.web.context.ServletContextAware; /** * Factory to create a {@code ContentNegotiationManager} and configure it with * one or more {@link ContentNegotiationStrategy} instances via simple setters. * The following table shows setters, resulting strategy instances, and if in * use by default: * * <table> * <tr> * <th>Property Setter</th> * <th>Underlying Strategy</th> * <th>Default Setting</th> * </tr> * <tr> * <td>{@link #setFavorPathExtension}</td> * <td>{@link PathExtensionContentNegotiationStrategy Path Extension strategy}</td> * <td>On</td> * </tr> * <tr> * <td>{@link #setFavorParameter favorParameter}</td> * <td>{@link ParameterContentNegotiationStrategy Parameter strategy}</td> * <td>Off</td> * </tr> * <tr> * <td>{@link #setIgnoreAcceptHeader ignoreAcceptHeader}</td> * <td>{@link HeaderContentNegotiationStrategy Header strategy}</td> * <td>On</td> * </tr> * <tr> * <td>{@link #setDefaultContentType defaultContentType}</td> * <td>{@link FixedContentNegotiationStrategy Fixed content strategy}</td> * <td>Not set</td> * </tr> * <tr> * <td>{@link #setDefaultContentTypeStrategy defaultContentTypeStrategy}</td> * <td>{@link ContentNegotiationStrategy}</td> * <td>Not set</td> * </tr> * </table> * * <p>The order in which strategies are configured is fixed. Setters may only * turn individual strategies on or off. If you need a custom order for any * reason simply instantiate {@code ContentNegotiationManager} directly. * * <p>For the path extension and parameter strategies you may explicitly add * {@link #setMediaTypes MediaType mappings}. This will be used to resolve path * extensions or a parameter value such as "json" to a media type such as * "application/json". * * <p>The path extension strategy will also use {@link ServletContext#getMimeType} * and {@link MediaTypeFactory} to resolve a path extension to a MediaType. * * @author Rossen Stoyanchev * @since 3.2 */ public class ContentNegotiationManagerFactoryBean implements FactoryBean<ContentNegotiationManager>, ServletContextAware, InitializingBean { private boolean favorPathExtension = true; private boolean favorParameter = false; private boolean ignoreAcceptHeader = false; private Map<String, MediaType> mediaTypes = new HashMap<>(); private boolean ignoreUnknownPathExtensions = true; private Boolean useRegisteredExtensionsOnly; private String parameterName = "format"; private ContentNegotiationStrategy defaultNegotiationStrategy; private ContentNegotiationManager contentNegotiationManager; private ServletContext servletContext; /** * Whether the path extension in the URL path should be used to determine * the requested media type. * <p>By default this is set to {@code true} in which case a request * for {@code /hotels.pdf} will be interpreted as a request for * {@code "application/pdf"} regardless of the 'Accept' header. */ public void setFavorPathExtension(boolean favorPathExtension) { this.favorPathExtension = favorPathExtension; } /** * Add a mapping from a key, extracted from a path extension or a query * parameter, to a MediaType. This is required in order for the parameter * strategy to work. Any extensions explicitly registered here are also * whitelisted for the purpose of Reflected File Download attack detection * (see Spring Framework reference documentation for more details on RFD * attack protection). * <p>The path extension strategy will also try to use * {@link ServletContext#getMimeType} and * {@link org.springframework.http.MediaTypeFactory} to resolve path extensions. * @param mediaTypes media type mappings * @see #addMediaType(String, MediaType) * @see #addMediaTypes(Map) */ public void setMediaTypes(Properties mediaTypes) { if (!CollectionUtils.isEmpty(mediaTypes)) { for (Entry<Object, Object> entry : mediaTypes.entrySet()) { String extension = ((String)entry.getKey()).toLowerCase(Locale.ENGLISH); MediaType mediaType = MediaType.valueOf((String) entry.getValue()); this.mediaTypes.put(extension, mediaType); } } } /** * An alternative to {@link #setMediaTypes} for use in Java code. * @see #setMediaTypes * @see #addMediaTypes */ public void addMediaType(String fileExtension, MediaType mediaType) { this.mediaTypes.put(fileExtension, mediaType); } /** * An alternative to {@link #setMediaTypes} for use in Java code. * @see #setMediaTypes * @see #addMediaType */ public void addMediaTypes(Map<String, MediaType> mediaTypes) { if (mediaTypes != null) { this.mediaTypes.putAll(mediaTypes); } } /** * Whether to ignore requests with path extension that cannot be resolved * to any media type. Setting this to {@code false} will result in an * {@code HttpMediaTypeNotAcceptableException} if there is no match. * <p>By default this is set to {@code true}. */ public void setIgnoreUnknownPathExtensions(boolean ignore) { this.ignoreUnknownPathExtensions = ignore; } /** * @deprecated as of 5.0, in favor of {@link #setUseRegisteredExtensionsOnly(boolean)}, which * has reverse behavior. */ @Deprecated public void setUseJaf(boolean useJaf) { setUseRegisteredExtensionsOnly(!useJaf); } /** * When {@link #setFavorPathExtension favorPathExtension} is set, this * property determines whether to use only registered {@code MediaType} mappings * to resolve a path extension to a specific MediaType. * <p>By default this is not set in which case * {@code PathExtensionContentNegotiationStrategy} will use defaults if available. */ public void setUseRegisteredExtensionsOnly(boolean useRegisteredExtensionsOnly) { this.useRegisteredExtensionsOnly = useRegisteredExtensionsOnly; } private boolean useRegisteredExtensionsOnly() { return (this.useRegisteredExtensionsOnly != null && this.useRegisteredExtensionsOnly); } /** * Whether a request parameter ("format" by default) should be used to * determine the requested media type. For this option to work you must * register {@link #setMediaTypes media type mappings}. * <p>By default this is set to {@code false}. * @see #setParameterName */ public void setFavorParameter(boolean favorParameter) { this.favorParameter = favorParameter; } /** * Set the query parameter name to use when {@link #setFavorParameter} is on. * <p>The default parameter name is {@code "format"}. */ public void setParameterName(String parameterName) { Assert.notNull(parameterName, "parameterName is required"); this.parameterName = parameterName; } /** * Whether to disable checking the 'Accept' request header. * <p>By default this value is set to {@code false}. */ public void setIgnoreAcceptHeader(boolean ignoreAcceptHeader) { this.ignoreAcceptHeader = ignoreAcceptHeader; } /** * Set the default content type to use when no content type is requested. * <p>By default this is not set. * @see #setDefaultContentTypeStrategy */ public void setDefaultContentType(MediaType contentType) { this.defaultNegotiationStrategy = new FixedContentNegotiationStrategy(contentType); } /** * Set the default content types to use when no content type is requested. * <p>By default this is not set. * @see #setDefaultContentTypeStrategy * @since 5.0 */ public void setDefaultContentTypes(List<MediaType> contentTypes) { this.defaultNegotiationStrategy = new FixedContentNegotiationStrategy(contentTypes); } /** * Set a custom {@link ContentNegotiationStrategy} to use to determine * the content type to use when no content type is requested. * <p>By default this is not set. * @see #setDefaultContentType * @since 4.1.2 */ public void setDefaultContentTypeStrategy(ContentNegotiationStrategy strategy) { this.defaultNegotiationStrategy = strategy; } /** * Invoked by Spring to inject the ServletContext. */ @Override public void setServletContext(ServletContext servletContext) { this.servletContext = servletContext; } @Override public void afterPropertiesSet() { List<ContentNegotiationStrategy> strategies = new ArrayList<>(); if (this.favorPathExtension) { PathExtensionContentNegotiationStrategy strategy; if (this.servletContext != null && !useRegisteredExtensionsOnly()) { strategy = new ServletPathExtensionContentNegotiationStrategy( this.servletContext, this.mediaTypes); } else { strategy = new PathExtensionContentNegotiationStrategy(this.mediaTypes); } strategy.setIgnoreUnknownExtensions(this.ignoreUnknownPathExtensions); if (this.useRegisteredExtensionsOnly != null) { strategy.setUseRegisteredExtensionsOnly(this.useRegisteredExtensionsOnly); } strategies.add(strategy); } if (this.favorParameter) { ParameterContentNegotiationStrategy strategy = new ParameterContentNegotiationStrategy(this.mediaTypes); strategy.setParameterName(this.parameterName); strategies.add(strategy); } if (!this.ignoreAcceptHeader) { strategies.add(new HeaderContentNegotiationStrategy()); } if (this.defaultNegotiationStrategy != null) { strategies.add(this.defaultNegotiationStrategy); } this.contentNegotiationManager = new ContentNegotiationManager(strategies); } @Override public ContentNegotiationManager getObject() { return this.contentNegotiationManager; } @Override public Class<?> getObjectType() { return ContentNegotiationManager.class; } @Override public boolean isSingleton() { return true; } }