Lachlan

Jetty 12 - Review and fix Alias Checking

12

Jetty 12 alias checking needs to be reviewed and fixed. AliasCheck is an interface defined in jetty-core but is only used in the ee10 servlet ContextHandler and is not used...

- Strengthen contract of WebSocket upgrade methods by defining in javadoc that an error response needs to be generated by them if they are not returning a WebSocket Object. -...

Issue #8353 - websocket automatic pong response frames

1

## Closes #8353 - Pay attention to the callback to the ping frame (do not demand until response pong frame has been sent).

We don't want to create the unmodifiableList every time we check an alias, so use `_aliasChecks` directly instead of using the getter. Also I don't think we need the `CopyOnWriteArrayList`...

Resource.getAllResources() will hang forever if symlink loop exists within resource directory.

11

If there is a circular symlink directory structure somewhere within the resource directory, calling `getAllResources()` will never complete. I did a flamegraph while this was happening and `getAllResources()` was on...

Issue #6328 - avoid binding WebSocket MethodHandles

4

## Issue #6328 Use a new `JettyMethodHandle` interface so that implementations can be used which avoid binding the MethodHandles for each WebSocket connection. This will avoid the multiple spikes seen...

Persistent OpenId sessions can throw IllegalStateException

1

**Jetty version(s)** all **Description** After persisting an OpenId session to the `SessionDataStore` the user identity is lost as it is a transient field in `SessionAuthentication`. This is causing an ISE...

I have run into issue https://github.com/crossbario/autobahn-testsuite/issues/88 when running the tests with the docker image. This has since been fixed but the fix is not present in the latest version of...

## Issue #7286 Let websocket-core handle any idleTimeout & writeTimeouts instead of bad attempt to do it in Jetty/Javax API layers.

Issue #6167 - Review failure cases of HttpOutput.Interceptor

3

**Issue #6167** This PR adds extra testing around what happens if an `HttpOutput.Interceptor` throws or fails the callback. Some changes were made to `HttpOutput` so that in most cases we...