[basex-talk] WWW-Authenticate header

2019-01-30 Thread Johannes Bauer
Hello BaseX Team, I'm trying to implement a RESTXQ service that uses JWT tokens for authorization and authentication. For this purpose I use a permission check annotated function that validates the token and returns a 401 response if the token is invalid or missing. declare

Re: [basex-talk] fn:serialize() behaviour

2019-01-30 Thread Christian GrĂ¼n
Hi George, Your query will probably give a better result if you wrap head and body into an html element: let $head := let $body := return serialize( element html { $head, $body }, map { "method": "html", "version": "5.0"} ) But you are right, in general it makes no sense to

[basex-talk] %perm:allow annotation

2019-01-30 Thread Johannes Bauer
Hi again, I've another question about the %perm:allow annotation. Is it possible to use multiple instances of this annotation? My expectation would be that any of the listed roles is allowed to call the function. For example: declare %rest:GET %rest:path("/multi") %perm:allow("role1")