From 46fd253dfd1ade2e7c12b02a0f0cdd6b5344d39d Mon Sep 17 00:00:00 2001 From: PJ Fanning Date: Wed, 8 Jul 2026 21:38:32 +0100 Subject: [PATCH] link to jackson docs in pekko core (#1143) --- docs/src/main/paradox/common/json-support.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/src/main/paradox/common/json-support.md b/docs/src/main/paradox/common/json-support.md index f3ab1bf839..4a428dbe06 100644 --- a/docs/src/main/paradox/common/json-support.md +++ b/docs/src/main/paradox/common/json-support.md @@ -20,6 +20,9 @@ To make use of the support module for (un)marshalling from and to JSON with [Jac version="PekkoHttpVersion" } +It is recommended that you read the @extref[pekko-serialization-jackson](pekko-docs:serialization-jackson.html) docs and in particular, the Security concerns. +Pekko HTTP Jackson support also strongly discourages the use of `JsonTypeInfo` with `Id.CLASS` or `Id.MINIMAL_CLASS`. Use `Id.NAME` or another of the safe options. + Use `org.apache.pekko.http.javadsl.marshallers.jackson.Jackson.unmarshaller(T.class)` to create an @apidoc[Unmarshaller[HttpEntity,T]] which expects the request body (HttpEntity) to be of type `application/json` and converts it to `T` using Jackson.