Package installation fails when REST API is disabled

[line-o]

What happened?

When trying to install a package with xst (starting with version 1.9.0) on an instance of exist-db that has

      <init-param>
         <param-name>hidden</param-name>
         <param-value>true</param-value>
      </init-param>

set in etc/webapp/WEB-INF/web.xml, effectively disabling the REST API, package installation fails with

; xst package install spec/fixtures/test-app.xar
Install test-app.xar on https://localhost:8443
Response code 403 (Forbidden)

As it fails to fall back to XMLRPC API. As a workaround one can still force XMLRPC use by providing --rpc to the installation command.

; xst package install spec/fixtures/test-app.xar --rpc

or by setting it in the configuration (only possible in .xstrc):

{ "rpc": true }

System Information

Build: eXist-7.0.0-SNAPSHOT (b032a424e9e92582938080d90b057a14c079df04)
Java: 17.0.6 (Azul Systems, Inc.)
OS: Mac OS X 13.6 (aarch64)

Relevant shell output

; xst package install spec/fixtures/test-app.xar
Install test-app.xar on https://localhost:8443
Response code 403 (Forbidden)

[github-actions[bot]]

:tada: This issue has been resolved in version 1.9.2 :tada:

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot :package::rocket: