From 330b852dc5c72928fbee9ec0ccca6693272af6c4 Mon Sep 17 00:00:00 2001 From: Paolo Bazzi Date: Tue, 26 May 2026 18:48:38 +0200 Subject: [PATCH] REST tunnel migration guide: add note about exposing /api endpoint 425245 --- docs/modules/migration/partials/migration-guide-26.1.adoc | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/modules/migration/partials/migration-guide-26.1.adoc b/docs/modules/migration/partials/migration-guide-26.1.adoc index c39372c138..517f63e29c 100644 --- a/docs/modules/migration/partials/migration-guide-26.1.adoc +++ b/docs/modules/migration/partials/migration-guide-26.1.adoc @@ -187,6 +187,9 @@ The `HttpServiceTunnelTransportManager` and its configuration properties `scout. On the server-side there is no `ServiceTunnelServlet` anymore to answer incoming HTTP requests, instead a `ProcessResource` (REST resource) has been created which delegates the request to the `ServiceTunnelService`. +IMPORTANT: The new `ProcessResource` is exposed as `/api/process` REST endpoint instead of the former `/process` endpoint. +Make sure that `/api` is not generally exposed without further authorization filter (see `org.eclipse.scout.rt.server.app.ServerServletContributors.AuthFilterContributor` and its `filterExcludes` implementation) because this would include and expose the new `/api/process` endpoint. + Arbitrary `IServiceTunnelContentHandler` support was removed (and also the `SoapServiceTunnelContentHandler` implementation), the service tunnel now always uses the `BinaryServiceTunnelContentHandler` bean (which may still be extended). The duplicate request detection `SequenceNumberDuplicateDetector` has been removed.