BaseX：没有验证的公共REST API

Question

是否有可能在BaseX中创建一个公共REST API，以便客户端根本不需要验证？

此公共API应该是只读的。我已经完成的工作是创建一个名为HTTPGuest的用户，该用户可以读取某些数据库。

然后我试了basexhttp -UHTTPGuest。但API仍然希望通过基本认证获得凭证。

Answer 1

您可以通过修改web.xml文件，它通常位于~/BaseXWeb/WEB-INF/web.xml提供默认凭据。该文件包含以下块>

<!-- REST Service (can be deactivated by removing this entry) --> 
    <servlet> 
    <servlet-name>REST</servlet-name> 
    <servlet-class>org.basex.http.rest.RESTServlet</servlet-class> 
    <!-- service-specific credentials 
    <init-param> 
     <param-name>org.basex.user</param-name> 
     <param-value/> 
    </init-param> 
    <init-param> 
     <param-name>org.basex.password</param-name> 
     <param-value/> 
    </init-param> 
    --> 
    </servlet> 
    <servlet-mapping> 
    <servlet-name>REST</servlet-name> 
    <url-pattern>/rest/*</url-pattern> 
    </servlet-mapping> 

这里，取消对<init-param/>子树和用户/密码组合添加到<param-value/>元素，例如

<!-- REST Service (can be deactivated by removing this entry) --> 
    <servlet> 
    <servlet-name>REST</servlet-name> 
    <servlet-class>org.basex.http.rest.RESTServlet</servlet-class> 
    <init-param> 
     <param-name>org.basex.user</param-name> 
     <param-value>HTTPGuest</param-value> 
    </init-param> 
    <init-param> 
     <param-name>org.basex.password</param-name> 
     <param-value>super-secret-passphrase</param-value> 
    </init-param> 
    </servlet> 
    <servlet-mapping> 
    <servlet-name>REST</servlet-name> 
    <url-pattern>/rest/*</url-pattern> 
    </servlet-mapping>