Special ObjectInputStream subclass that falls back to a specified codebase
to load classes from if not found locally. In contrast to standard RMI
conventions for dynamic class download, it is the client that determines
the codebase URL here, rather than the "java.rmi.server.codebase" system
property on the server.
Uses the JDK's RMIClassLoader to load classes from the specified codebase.
The codebase can consist of multiple URLs, separated by spaces.
Note that RMIClassLoader requires a SecurityManager to be set, like when
using dynamic class download with standard RMI! (See the RMI documentation
for details.)
Despite residing in the RMI package, this class is not used for
RmiClientInterceptor, which uses the standard RMI infrastructure instead
and thus is only able to rely on RMI's standard dynamic class download via
"java.rmi.server.codebase". CodebaseAwareObjectInputStream is used by
HttpInvokerClientInterceptor (see the "codebaseUrl" property there).
Thanks to Lionel Mestre for suggesting the option and providing
a prototype!
public CodebaseAwareObjectInputStream(java.io.InputStream in,
@Nullable
java.lang.ClassLoader classLoader,
java.lang.String codebaseUrl)
throws java.io.IOException
Create a new CodebaseAwareObjectInputStream for the given InputStream and codebase.
Parameters:
in - the InputStream to read from
classLoader - the ClassLoader to use for loading local classes
(may be null to indicate RMI's default ClassLoader)
codebaseUrl - the codebase URL to load classes from if not found locally
(can consist of multiple URLs, separated by spaces)
public CodebaseAwareObjectInputStream(java.io.InputStream in,
@Nullable
java.lang.ClassLoader classLoader,
boolean acceptProxyClasses)
throws java.io.IOException
Create a new CodebaseAwareObjectInputStream for the given InputStream and codebase.
Parameters:
in - the InputStream to read from
classLoader - the ClassLoader to use for loading local classes
(may be null to indicate RMI's default ClassLoader)
acceptProxyClasses - whether to accept deserialization of proxy classes
(may be deactivated as a security measure)