Avoiding CORS security issues

CORS is security policy, according which a page could not be iframe-d from page from another site.

ajax requests are implemented via iframe, so if we want to do ajax requests to another site, we encounter CORS error.

How to enable this?

Solution is to tell server to allow the page/JSON/webservice to be iframed. This is done this way:
    public String getUserById(@PathVariable("id") Long id, HttpServletResponse httpResponse) throws JsonProcessingException {
        httpResponse.addHeader("Access-Control-Allow-Origin", "*");
        // do real work
    }

Access-Control-Allow-Origin is the header that allows this. Check wikipedia for other solutions.

solved: Spring + Hibernate used with JPA and EntityManager => HibernateException: collection is not associated with any session

When I started using lazy loading in Spring + Hibernate project, I encounter this error.

What does NOT solve my issue:

• @Transactional annotation
• OpenSessionInViewInterceptor

The error message was:

HTTP ERROR 500

Problem accessing /user/1. Reason:

    Server Error

Caused by:

org.springframework.web.util.NestedServletException: Request processing failed; nested exception is org.hibernate.HibernateException: collection is not associated with any session
 at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:894)

Solution for Spring with JPA approach and EntityManager, is to use OpenEntityManagerInViewFilter. Register it in web.xml this way:
<filter>
    <filter-name>
        OpenEntityManagerInViewFilter
    </filter-name>
    <filter-class>
        org.springframework.orm.jpa.support.OpenEntityManagerInViewFilter
    </filter-class>
    <init-param>
        <param-name>singleSession</param-name>
        <param-value>true</param-value>
    </init-param>
    <init-param>
        <param-name>flushMode</param-name>
        <param-value>AUTO</param-value>
    </init-param>
</filter>
<filter-mapping>
    <filter-name>OpenEntityManagerInViewFilter</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

Sources:
http://stackoverflow.com/questions/9304020/lazy-initialisation-with-openentitymanagerinviewfilter - not the selected answer, but this from Jhonathan

How to serialize only the ID of a child with Jackson?

Solution from stackoverflow.com

public class Parent {
   @JsonIdentityInfo(generator=ObjectIdGenerators.PropertyGenerator.class, property="id")
   @JsonIdentityReference(alwaysAsId=true) // otherwise first ref as POJO, others as id
   public Child child; // or use for getter or setter

   // if using 'PropertyGenerator', need to have id as property -- not the only choice
   public int id;
}

Jackson + Spring + Maven = http error 406 - workarounded

I get this error in Spring project with Jackson, with annotations:

HTTP ERROR 406

Problem accessing /xxx/4. Reason:

    Not Acceptable

---

Powered by Jetty://

I have tested it with Jackson 2.3.1, 2.2.3 and 2.1.3 - same. Spring 3.1.1 and 3.1.0 - same. Application server jetty and tomcat - same, but in Tomcat dies with no error/log text.

So my conclusion is:

Jackson sucks!

And this is not for its error (there are no errors in controller method, it passes fine), but in dieing with no single line of message.

I will revert to jackson 1, where this error is not absolute blocker to me (i get it only on one page in version 1).

P.S. No answer on stackoverflow uptill 2014.2 helped me :(


Edit: the solution.
Holly *hit, I finally overcome the issue in very simple way!

Clean, not working way:
    @RequestMapping(value="/t")
    @ResponseBody
    public Dummy getT() {
        Dummy t = new Dummy();
        t.setId(1L);
        t.setUrl("sdfsaf");
        System.out.println( "hello from t" );
        return t;
    }

Workaround:
    @RequestMapping(value = "/manualDummy", method = RequestMethod.GET)
    @ResponseBody
    public String manualDummy(/*HttpServletRequest request, ModelMap model*/) throws JsonProcessingException {
        ObjectMapper mapper = new ObjectMapper(); // com.fasterxml.jackson.databind.ObjectMapper
        Dummy t = new Dummy();
        t.setId(1L);
        t.setUrl("sdfsaf");
        return mapper.writeValueAsString(t);
    }

P.S. Jackson continues to sucks...

Netbeans useful shortcuts

Links with useful key shortcuts for NetBeans:

http://netbeanside61.blogspot.com/2008/04/top-10-netbeans-ide-keyboard-shortcuts.html

How to Stop Netbeans: Transferring repository index

I see at status bar, that Netbeans is Transferring repository index : java.net repository. It slows down my computer very much. Very annoying.

Solution for Netbeans 7.4 (and possibly later versions, 8.0):
Tools | Options | Java | Index”, find “Index Update Frequency” and then adjust how often it should be updated (Never :).

KendoUI Mobile: force refresh / reload / update on a ListView

Lets have a list view, initialized with data from variable employees this way:

<ul id="employeesListView" data-role="listview" data-title="Employee list title" data-source="employees" data-template="employees-template" />

If we have updated the variable employees, the listview stays the same. To force update, we have to do this:

        $("#employeesListView").kendoMobileListView({            dataSource: employees,
            template:  $("#employees-template").text(),
        });

KendoUI Mobile: catching connection errors in accesing remote datasource

    var dataSource = new kendo.data.DataSource({
        transport: {
            read: {
                url: "https://ala.bala.com:443/test/test.json2",
                timeout: 3900,
                dataType: "json",
                data: {
                    q: "javascript"
                },
            },
        },
        schema: {
            data: "results"
        },
        error: function(e) {
            console.log(JSON.stringify(e));
        }    });

KendoUI Mobile: working example with remote json listview databinding

Source could be downloaded from this thread. Tested and working.

In the example .json file has to be placed in folder of index.html, but you could move it in any remote server and point "url" to its location.

Using JSON web services in jQuery - simple example

Lets web-service returns this data:

{"user":{"@id":"10","firstName":"Bill","lastName":"Clinton"}}

Here is the JavaScript code:
                var ws_url = 'http://example.webservice.com:8002/xxx-ws/management/usr/10';
                $.ajax({
                  url: ws_url,
                  dataType: 'json',
                  timeout : 5000,
                }).success(function( data, textStatus, xhr ) {
                        alert( "returned user name = " + data.user.firstName + " " + data.user.lastName );
                        gdata = data;
                }).error(function(httpObj, textStatus) {       
                    alert(textStatus);
                    alert(JSON.stringify(httpObj));
                });


You will get [returned user name = Bill Clinton]

jetty 9 in maven. Newer jetty, older jetty

Update from jetty 6 to jetty 9 done - solved!

Fixed version Jetty 9:
        <plugin>
            <groupId>org.eclipse.jetty</groupId>
            <artifactId>jetty-maven-plugin</artifactId>
            <version>9.1.1.v20140108</version>
        </plugin>

Latest Jetty:
        <plugin>
            <groupId>org.eclipse.jetty</groupId>
            <artifactId>jetty-maven-plugin</artifactId>
        </plugin>

Older jetty 6 was with non-eclipse groupId, which cause auto version update to 7+ not to works. If you want Jetty 6, this is the pom.xml fraction you need.
        <plugin>
          <groupId>org.mortbay.jetty</groupId>
          <artifactId>maven-jetty-plugin</artifactId>
        </plugin>

Custom configuration
Some useful configuration options for Jetty:
        <plugin>
            <groupId>org.eclipse.jetty</groupId>
            <artifactId>jetty-maven-plugin</artifactId>
            <configuration>
              <scanIntervalSeconds>2</scanIntervalSeconds>
              <webApp>
                <contextPath>/my-context</contextPath><!-- default is / -->
              </webApp>
            </configuration>           
        </plugin>